Home / malware

PDF

Exploit:JS/Mult.DC

First posted on 16 April 2019.
Source: Microsoft

Aliases :

Exploit:JS/Mult.DC is also known as Exploit.JS.Mult, Suspicious-PDF.gen, Exploit.PDF-JS.Gen.

Explanation :

Exploit:JS/Mult.DC is the detection for a specifically obfuscated JavaScript, embedded in PDF files, that targets software vulnerabilities in Adobe Acrobat and Adobe Reader.   It usually arrives in the computer when the user visits a webpage that contains a malicious PDF file or opens an email containing the malicious PDF file as an attachment.   Exploit:JS/Mult.DC may exploit one of the following vulnerabilities:   CVE-2008-2992 CVE-2009-0927 CVE-2009-4324   In the wild, successful exploit of this vulnerability has resulted in malware being downloaded from the domain "tannity.com".   Analysis by Marian Radu

Last update 16 April 2019

 

TOP