Archive Formats Kill Antivirus Products

Posted by kdawson on Tuesday March 18, 2008 @06:07AM from the fuzz-in-the-zip dept.

nemiloc sends us to the F-Secure blog for breaking news about widespread vulnerabilities in programs that process archive files: "The Secure Programming Group at Oulu University has created a collection of malformed archive files. These archive files break and crash products from at least 40 vendors — including several antivirus vendors... including us." Here is test material from OUSPG and a joint advisory from Finnish and English security organizations. It isn't news that security products can have have security vulnerabilities. What makes this advisory important is that antivirus software is a perfect target. It is run in critical places with high privileges and auto-updates to keep versions coherent.

1 of 115 comments (clear)

Min score:

Reason:

Sort:

Can't wait. by flatcat · 2008-03-18 06:37 · Score: 0, Redundant

Click here to install our crack for xyz software ( test material from OUSPG )
If that did not work click here for our other version ( install virus of choice )
Small chance you will need this version ;) since we are great coders.

Sounds like fun.