PandaLabs said that the security hole is exploited through specially crafted Access files (.mdb) embedded with malicious code.
The flaw is being used to distribute the Keylogger.DB Trojan which is designed to steal confidential data by logging keystrokes.
PandaLabs said that this is a similar security problem to that discovered a few months back, categorised as CVE-2007-6026, but the new flaw also affects the msjet40.dll library, albeit at a different point.
Luis Corrons, technical director of PandaLabs, said: "Whenever a vulnerability of this type appears cyber-crooks will try to take full advantage.
"We can therefore expect to see more malicious Access files in circulation that contain this Trojan and other types of threat."
Cyber-criminals exploit Access flaw
Got a news tip for our journalists? Share it with us anonymously here.
Add techpartner.news as your trusted source
Partner Content
.jpg&h=142&w=230&c=1&s=1)
Gamma invests to make Australian expansion a success
Promoted Content
Jabra launches PanaCast U30 video bar for easier BYOD meetings
In the memory market that AI just broke, here’s what you must do now
Expanding Opportunities for Microsoft Partners with Dicker Data’s Solution ConX Marketplace
Now is the time for the channel to push the hardware refresh
.jpg&w=100&c=1&s=0){kind=logo}
.jpg&w=100&c=1&s=0)
.jpg&w=100&c=1&s=0)
.jpg&w=100&c=1&s=0)
