Weaknesses In Several Virus Scanners


Recommended Posts

20 April 2009, 11:05

Weaknesses in several virus scanners

"The security specialist Thierry Zoller has made several reports on errors in virus scanners from BitDefender, avast, ESET and Fortinet. According to Zoller, all have problems in dealing with corrupt archive files, making it possible for infected files to be smuggled past the scanners. Zoller says this is a particular problem for gateways.

BitDefender confirmed the error existed in many of its products and released a patch for it last week, which has been distributed over its automatic update system. ESET also acknowledged the error and have released updates through their automatic update system. Zoller says that only Avast and Fortinet have not reacted to his alerts, noting neither have replied to his attempts to responsibly disclose the issue to them."

BitDefender - Generic bypass/evasion CAB, advisory from Thierry Zoller.

avast! - Generic evasion (Limited details), advisory from Thierry Zoller.

Nod32 (ESET) - Generic Evasion (Limited details), advisory from Thierry Zoller.

Fortinet - Evasion / Bypass (Limited details), advisory from Thierry Zoller.

Heise security: http://www.h-online.com/security/Weaknesse...s--/news/113102

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...