Exploit:Java/CVE-2011-3544 is a family of malicious Java applets that attempt to exploit a vulnerability in the Java Runtime Environment (JRE) in order to download and install files of an attacker's choice onto your computer.

If you visit a website containing the malicious code while using a vulnerable version of Java, Exploit:Java/CVE-2011-3544 is loaded. It then attempts to download and execute files from a remote host/URL; the files that are downloaded and executed could include additional malware.

Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier are all vulnerable to this exploit.

Exploit:Win32/CVE-2011-0658 is a detection for malware that attempts to exploit a vulnerability in Microsoft Windows Object Linking and Embedding (OLE) Automation. The vulnerability is discussed in Microsoft Bulletin MS11-038.

Exploit:AndroidOS/CVE-2011-1823 is the detection for specially-crafted Android programs that attempt to exploit a vulnerability in the Android operating system to gain root privilege. The vulnerability is discussed in CVE-2011-1823.

Exploit:Win32/CVE-2011-2100.A is a detection for malware, usually a DLL file, that exploits a vulnerability in Adobe Acrobat and Adobe Reader. The vulnerability is discussed in the following pages:

• CVE-2011-2100
• Adobe Security Advisory APSB11-16

Exploit:SWF/CVE-2011-0611.I is the detection for specially crafted Shockwave Flash (SWF) files that attempts to exploit a vulnerability in Adobe Flash Player that could lead to the execution of arbitrary code. The vulnerability is described in CVE-2011-0611 and Adobe Security Advisory APSA11-02.

Exploit:Win32/CVE-2011-1270 is the generic detection for specially crafted Microsoft PowerPoint Presentation (.PPS / .PPT) data files that trigger the vulnerability described in CVE-2011-1270 and resolved with the release of Microsoft Security Bulletin MS11-036.

Exploit:Java/CVE-2011-3544.AV is a detection for a malicious Java applet stored within a Java Archive (.JAR) that attempts to exploit a vulnerability in a Java Runtime Environment (JRE) component in Oracle, JAVA SE JDK and JRE 7, 6 update 27 and earlier. The vulnerability, discussed in CVE-2011-3544, allows an unsigned Java applet to gain elevated privileges and potentially have unrestricted access to run arbitrary Java code outside of the "sandbox" environment.

Exploit:Win32/CVE-2011-2140.A is a detection for malware that attempts to exploit a vulnerability in Adobe Flash Player

Exploit:Java/CVE-2011-3544.L is the detection for a malicious Java applet stored within a Java Archive (.JAR) that attempt to exploit a vulnerability in Java Runtime Environment (JRE) component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier. The vulnerability is referred to as CVE-2011-3544 allows an unsigned Java applet to gain elevated privileges and potentially have unrestricted access to run arbitrary Java code outside of the "sandbox" environment.

Exploit:Java/CVE-2011-3544.U is a detection for a malicious Java applet stored within a Java Archive (.JAR) that attempts to exploit a vulnerability in a Java Runtime Environment (JRE) component in Oracle, JAVA SE JDK and JRE 7, 6 update 27 and earlier.

More information about the vulnerability is available in the following articles:

• CVE-2011-3544
• Oracle Java SE Critical Patch Update Advisory - October 2011

Exploit:SWF/CVE-2011-0611.A is a detection for specially crafted malicious code within a Shockwave Flash (SWF) file. The malicious code attempts to exploit a vulnerability in Adobe Flash Player that could lead to the execution of arbitrary code. The vulnerability is described in CVE-2011-0611 and Adobe Security Advisory APSA11-02.

Exploit:Win32/CVE-2011-0977 is the generic detection for specially crafted Microsoft Office files that exploit a vulnerabilty discussed in CVE-2011-0977 and mitigated with the release of Microsoft Security Bulletin MS11-023.

Exploit:SWF/CVE-2011-2107.A is the detection for specially-crafted Shockwave Flash (.SWF) files that attempt to exploit software vulnerabilities in Adobe Flash Player and Adobe Reader and Acrobat X. The vulnerability is discussed in the following articles:

• CVE-2011-2107
• APSB11-13

This is a detection for threats that attempt to exploit a vulnerability in the following software:

• Microsoft Excel 2002 SP3
• Office 2004 and 2008 for Mac
• Open XML File Format Converter for Mac

Find out ways that malware can get on your PC.