Troj/SWFDL-I is a variant of the Poison Ivy Trojan that is used in web-based attacks related to with a ‘zero day’ hole in Internet Explorer to compromise vulnerable Windows computer systems running the Internet Explorer web browser. Troj/SWFDL-I exploits the Java vulnerability that affects Internet Explorer (versions 6, 7, 8 and 9) and Windows Vista, Windows 7 and Windows Server 2003 and 2008. The vulnerability can be remotely exploited using a website produced to target the security hole. A remote code execution vulnerability exists in an Internet Explorer function to access an object that has been deleted or not properly allocated. This vulnerability can corrupt a system’s memory in order to allow attackers execute a malicious code with the permission of the current Internet Explorer user.
How Can You Detect Troj/SWFDL-I?