Mydoom.AK

It has been observed that another variant of Mydoom worm called Mydoom.AK is spreading in the wild. This worm exploits the "Microsoft Internet Explorer buffer overflow vulnerability via FRAME and IFRAME tags" described in the CERT-In vulnerability note CIVN-2004-62. The worm spreads by sending an email to addresses harvested from the infected system. Users are advised to implement workarounds suggested in CIVN-2004-62 and maintain updated antivirus software. For further information refer to the following links.

Symantec
http://securityresponse.symantec.com/avcenter/venc/data
/w32.mydoom.ak@mm.html

US-CERT Current Activity
http://www.us-cert.gov/current/current_activity.html#w32/mydoom

CERT-In Vulnerability Note CIVN-2004-62
http://www.cert-in.org.in/vulnerability/civn-2004-62.htm

Securityfocus
http://www.securityfocus.com/bid/11515

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91 11-24368572

Postal address:
Indian Computer Emergency Response Team (CERT-In)
Ministry of Communications and Information Technology
Electronics Niketan
6, C.G.O. Complex
New Delhi-110 003