Potential New Xunlei 0-day Exploit

[Symantec]

Potential New Xunlei 0-day Exploit
<p>Symantec has observed active exploitation of a potential 0-day vulnerability in Xunlei Web Thunder. This vulnerability has been assigned <a href="http://www.securityfocus.com/bid/25192">BID 25192</a>. This vulnerability is closely related to a previously discovered Xunlei vulnerability identified as <a href="http://www.securityfocus.com/bid/25192">BID 24552</a>. Exploitation of this new vulnerability may result in arbitrary download of malicious files onto the compromised computer. </p>

<p>Symantec has observed an instance in which a copy of <a href="http://www.symantec.com/security_response/writeup.jsp?docid=2007-072510-5009-99">W32.Bratsters</a> was downloaded. In addition to this malware detection, the IPS signature <a href="http://www.symantec.com/avcenter/attack_sigs/s22391.html">HTTP XunLei WebThunder ActiveX Download</a> also detects the attempted exploitation.</p>

<p>Symantec recommends that users keep security related products up-to-date and apply appropriate vendor patches where applicable.</p>
http://www.symantec.com/enterprise/security_response/weblog/2007/08/potential_new_xunlei_0day_expl.html
http://www.symantec.com/enterprise/security_response/weblog/2007/08/potential_new_xunlei_0day_expl.html
Fri, 03 Aug 2007 16:18:09 -0800