Trojan in the wild for MS05-037

FYI…

Trojan.Jevprox
- http://www.sarc.com/avcenter/venc/data/trojan.jevprox.html
Discovered on: July 18, 2005
Last Updated on: July 19, 2005 10:09:04 AM
"Trojan.Jevprox is a downloader Trojan that exploits the Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overflow Vulnerability (described in MS Security Bulletin MS05-037)…"
- http://www.microsoft.com/technet/security/…n/MS05-037.mspx

FYI…

Further Reports of Exploits Against MS05-037
- http://isc.sans.org/diary.php?date=2005-07-19
Updated July 20th 2005 00:18 UTC
"A reader desiring anonymity told us that he’s seen some exploits of his systems by malicious websites using Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overflow Vulnerability (described in MS Security Bulletin MS05-037) to install malware. Looks like we better step up that patch rate, since this one could be a big problem."