Webwasher 6.0.1 Anti-Malware User's Guide - McAfee

— Usage of vulnerable functionality
Content Security
This functionality is located in the host environment, e. g. the Web
browser or the Java VM.
• Operations primarily performed by all kinds of mobile code
In this area, also select actions with regard to:
— Read access to local files
This includes the programmatic evaluation of (formerly obfuscated) program
code.
— Write access to local files
This also includes locally mounted network shares.
— Read access to the registry
This includes operations like opening registry keys and reading registry
values.
— Write access to the registry
This includes the creation and deletion of registry keys, as well as the
modification of registry values.
— Access to the network
With this operation, code may be classified as potentially malicious regardless
of the transport direction and application-level protocol.
— Dynamic loading of program code
This includes the instantiation of COM servers (as with ActiveX controls).
— Dynamic creation of program code
This includes the programmatic evaluation of (formerly obfuscated) program
code.
— Access to other processes
An example of this is usage of Interprocess Communication (IPC) functionality.
4–55