Several leaks in antivrus scanners includes Nod32 and others

Hi all,

Read about it in this Pdf file:

http://www.48bits.com/advisories/rtldospath.pdf

For our dutch readers: http://www.security.nl/article/1354..._en_anti-spyware_geeft_malware_vrij_spel.html

cheers,
Martin

 

Re: Several leaks in antivrus scanners includes Nod32

at least on-access scanner can detect for NOD32. Hope they'll fix this issue.

 

Re: Several leaks in antivrus scanners includes Nod32

It's a matter of Windows itself, hopefully MS will release a hotfix shortly.

 

Re: Several leaks in antivrus scanners includes Nod32

Pretty interesting still.

 

Re: Several leaks in antivrus scanners includes Nod32

Yes it is. I was interested in that not all programs were vulnerable in the same way if at all.

 

Scary exploit

This is pretty scary that all of these avs are vulnerable, seems to be a windows problem http://www.securityfocus.com/bid/17934/info

Alphalutra1

 

Since this exploit concerns numerous AV's I have taken the liberty to move this thread into our all AV forum and merge Alphalutra1's relevant thread for further discussion.

 

Anyway, NOD32's AMON blocks such special crafted files and allows deletion upon access.

 

kaspersky 6 realtime scan stop and clean this.

 

Great that the new Kaspersky can do what the old one, and others, can't.

And the Dutch website says that it's not only a problem of Windows but also of the AV-makers, so please don't point only at Microsoft.