Some AV cannot detect JPEG exploit mutations

This article is a couple of days old and some AV such as KAV have updated so they now detect the mutations. F-Prot has definitions dated Oct 14 but still does not detect the mutations.

http://lists.netsys.com/pipermail/full-disclosure/2004-October/027530.html

 

Hey Mele, how about being a pal & summarizing that report? It's all in italics, plus much techno-babble, so my small brain needs help.

shalom... bellgamin

 

It looks like scanning the jpeg2 file only mcafee symantec and trendmicro detected it. but the jpeg 1 file was detected by most av's

 

This is exploit and not a virus! Patch your system and you won't be vulnerable.


tECHNODROME

 

To everyone from Firefighter!

The first exploit was actually detected by many av:s. These av:s that were in VirusTotal plus AntiVir and DrWeb for instance.

Best regards,
Firefighter!

 

To everyone from Firefighter!

The second exploit was also detected by many av:s. These av:s that were in VirusTotal plus AntiVir and DrWeb.

PS. Even AntiVir detected both of these when it's so famous to NOT detect Exploits!

Best regards,
Firefighter!

 

Well does anyone use Windows Update here!? Huh. Even Jasc released patch (via PSP9 AutoUpdate) for their Paintshop Pro 9...