RSSSecurity Flaw in Kaspersky Antivirus
By Nate Mook | Published October 4, 2005, 3:20 PM
UPDATED A security researcher has uncovered a critical security flaw in Kaspersky Anti-Virus that could allow an attacker to take control of a vulnerable system. The problem lies in a component used to open CAB files, which can be exploited using a buffer overflow.
According to an advisory issued by Alex Wheeler, a malformed CAB file could be sent via e-mail, and when opened by Kaspersky Antivirus for processing the PC could be compromised.
Security firm Secunia has rated the flaw "Highly Critical" and notes that other Kaspersky software may also be vulnerable due to the component being reused across multiple products.
In a statement on its Web site, Kaspersky acknowledged the existence of the flaw but downplayed the potential risk to end users.
"The actual threat posed by the CAB vulnerability is minimal and cannot affect the level of antivirus protection provided by Kaspersky Lab products," the company said.
Nonetheless, Kaspersky has worked quickly to resolve the problem. Antivirus definitions released on September 29 onward include a check for such an attack. The company has also completed on an emergency update to its product line to fix the affected CAB module.
The new version of Kaspersky Anti-Virus is available for download via FileForum.
It took them one day to update their application modules, and hours to issue updated virus definitions. If only all security flaws were dealt with so speedily.
Score: 0
This is exactly why Kaspersky is the best Anti-Virus around. A flaw like this is discovered, they quickly explain and release a solution also noting that no PoC has been released on this flaw.
I trust Kaspersky for my AntiVirus needs because they are the best.
Score: 0
http://www.kaspersky.com/news?id=171512144
Wouldn't it be nice if Microsoft "Highly Critical" vulnerabilities were dealt with this quickly? Reported October 4. New virus definitions released October 4.
Score: 0
Very true. However you have to remember that frequent updates did cause confusion for customers in Microsoft's case, hence we got "Patch Tuesday." But aside from that, who knows? (Although the delay does provide for adequate "quality-check time," and Microsoft DOES break cycle on patches if it's an emergency...)
Score: 0