Microsoft confirms Security Essentials, Forefront not affected by Matousec exploit

[CiX]

When it first hit the blogosphere, Matousec's announcement about a failing in the way most Windows antivirus software operates sounded like a huge threat. "100% of the applications tested were compromised!" they reported. And yes, oh crap, that makes things sound pretty serious.

Article

Sorry if already posted

[whitedragon551]

Its no surprise. The software that was exploited isnt so deeply embedded into the system like MS products are made to be.

[funkydude]

Originally Posted by whitedragon551

Its no surprise. The software that was exploited isnt so deeply embedded into the system like MS products are made to be.

Sorry but you're just wrong. What makes you think MSE installs "deeply" into the Operating System? It is a basic and lean application, straight to the point, set it and forget it, like an AV should be.

The reason MSE/etc is not affected is because Microsoft products *have* to use Windows API properly, which is what all security products should be doing. Not hooking left, right and center.

[JRViejo]

The same topic was Posted here: Matousec Discloses Critical Vulnerability in ALL HIPS. Let's keep all Matousec discussions in that thread. Thanks!