AVG, F-PROT suffer vulnerabilities
Reports of buffer overflows and other problems.
A series of vulnerabilities have been discovered and patched in Grisoft's AVG Antivirus. Several issues
with archive handling could be exploited to cause buffer overflows, while some other problems with file handling,
including DOC and EXE files, could be used to create a denial of service.
AVG, the popular free edition of which is subject to the problems as well as other versions, has been updated
with patches for the vulnerabilities. Secunia has rated the problems 'highly critical'; its alert is
here, while a brief announcement of the update from
Grisoft is here.
Secunia is also carrying an alert, marked 'moderately critical', on a nebulous issue with
FRISK's F-PROT, which apparently could also be exploited to cause a buffer overflow leading to denial of
service or remote system access. No further details on the problem or any necessary patches are as yet available, but
users are advised to keep an eye out for updates. The alert is here.
15 November 2006
Tags:
virus
del.icio.us 
digg this
As expected, the annual VB100 test on Windows XP was an epic. A higher than usual pass rate was tempered by numerous stability issues with the products under test, prompting the unveiling of a new stability rating system. John Hawes has all the details.