These days there is a new vulnerability in VML (Vector Markup Language) that leaves MS operating system users at risk. - ESET’s state-of-the-art monitoring technology now indicates active exploitation of this vulnerability. Yet, ESET’s clients with NOD32 antivirus system do not have to worry; they are protected both reactively and proactively.

ESET’s antivirus systems identify this vulnerability as HTML/Exploit.VMLFill. Attackers exploiting this vulnerability might be able to take control over the whole system. This could happen when visiting specially created malicious web sites or opening HTML messages able to exploit the vulnerability through Internet Explorer. Thus attackers can hit their target only if users cooperate, meaning that they click on a link in a suspicious spam e-mail or instant message. However, the number of methods of exploitation of this vulnerability can gradually increase.

What is VML?
Vector Markup Language is a language used to produce vector graphic in applications such as Internet Explorer and MS Office in MS Windows 2000, XP and Server 2003. Thus it is used in most frequent Internet browser and Office package.

NOD32 detects HTML/Exploit.VMLFill since virus signature database version 1.1770 published on Saturday, 23 rd of September. At that time most of our competitors were not able to offer protection against this malicious code. NOD32 users, who allow this function, have this update automatically downloaded.

About ESET

ESET, spol. s r.o. is a global company focused on development of software security solutions. Founded in 1992, the company headquarters is located in Bratislava. According to the Technology Fast 500 list compiled by Deloitte & Touche, ESET consistently ranks among the fastest growing companies in the world. ESET is a global distributor of the award-winning next generation antivirus system NOD32. The company has affiliates in the USA and the Czech Republic and distributors in more than 80 countries around the world.