Author : editor
Article ID : 173
Audience : Default
Version 1.00
Published Date: 2010/3/9 14:21:44
Reads : 2

March 9,2010
Elinor Mills
CNET News.com

Software that can be downloaded for use with the Energizer Duo USB battery charger contains a backdoor that could allow an attacker to remotely take control of a Windows-based PC, Energizer and US-CERT is warning.

"The installer for the Energizer Duo software places the file UsbCharger.dll in the application's directory and Arucer.dll in the Windows system32 directory," the U.S. Computer Emergency Readiness Team said in an advisory on Friday. "Arucer.dll is a backdoor that allows unauthorized remote system access via accepting connections on 7777/tcp. Its capabilities include the ability to list directories, send and receive files, and execute programs."

Please read full article at:
http://www.zdnetasia.com/news/security/0,39044215,62061718,00.htm

0
Printer Friendly Page Send this Article to a Friend