A program or technique that takes advantage of a vulnerability to remotely access or attack a program, computer or server.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.
The vulnerabilities leveraged by the exploits are usually application or platform specific; in other words, a specific program (or even a specific version of a particular program) must be installed on the machine in order for the exploit to be effective.
To prevent exploitation of such vulnerabilities, please refer to the application vendor for the latest updates and additional advice.
In computer security terms, an exploit is an object - a program, a section of code, even a string of characters - that takes advantage of a vulnerability in a program or operating system to perform various actions. An exploit is almost always used in a malicious context.
If successfully used, exploits can provide an attacker with a wide range of possible actions, from viewing data on a restricted-user database to almost complete control of a compromised system.
For examples of exploits on various platfoms, see the following:
Note that some exploit detection names indicate the vulnerability involved, such as:
Where 'CVE-2012-0507' is the name used by the CVE - Common Vulnerabilities and Exposures (CVE) organization to identify the specific vulnerability targeted by the exploit.
An exploit kit is a toolkit that contains exploit code for multiple vulnerabilities, either in an operating system or in common, popular programs. Exploit kits are often planted by attackers on malicious or compromised legitimate websites, where they can silently probe the devices of visitors to that site.
If the exploit kit is able to successfully use one of its exploits against a visitor's vulnerable machine, it can then proceed with its actual malicious payload, which may range from installing components on the affected system, stealing data and so on.
Exploit kits are created to be easily updated with the latest exploits for newly discovered vulnerabilities, making it easy for the kit operators to keep them effective for use.
Examples of exploit kits include AnglerEK, Fiesta, Styx, SweetOrange, Archie and Astrum. For more information on these kits:
- Labs Weblog post: Low Hanging Fruit: Flash Player
- Labs Weblog post: Archie and Astrum: New Players in the Exploit Kit Market
- Labs Weblog post: Out-of-Band Flash Player Update for CVE-2014-8439
Further information on the most common vulnerabilities found in most programs may be found at: