joeware - never stop exploring...

The URI to TrackBack this entry is: http://blog.joeware.net/2006/05/26/382/trackback/

2 Responses to “Symantec Says Its Own AV Product Has Zero-Day Vulnerability”

1. Tomasz Onyszko Says:
   May 27th, 2006 at 8:13 am

   This is even omre funny when You firest read this:
   http://news.com.com/Beware+the+Microsoft+monoculture/2008-1009_3-6073640.html

   But this should be learning for Symantec and other compnies and specially compny I work for (MS ) to never become to humble about their product, and never let yourself be blinded by marketing and other such stuff.

2. Alun Jones Says:
   May 30th, 2006 at 11:03 am

   Seems like you’d design your virus scanner with two components - one that has higher privileges, and opens files (with read access only), then passes the handles to the actual scanner, which runs as low privilege, so that the obvious buffer overflow attacks only get low privilege, and even if they achieve remote execution, can only scan data.
   That’s how it seems, anyway.

Leave a Reply

Please note: Comment moderation is currently enabled so there will be a delay between when you post your comment and when it shows up. Patience is a virtue; there’s no need to re-submit your comment.