joeware - never stop exploring... :)

2 Responses to “Symantec Says Its Own AV Product Has Zero-Day Vulnerability”

1. Tomasz Onyszko says:

   5/27/2006 at 8:13 am

   This is even omre funny when You firest read this:
   http://news.com.com/Beware+the+Microsoft+monoculture/2008-1009_3-6073640.html

   But this should be learning for Symantec and other compnies and specially compny I work for (MS 🙂 ) to never become to humble about their product, and never let yourself be blinded by marketing and other such stuff.

2. Alun Jones says:

   5/30/2006 at 11:03 am

   Seems like you’d design your virus scanner with two components – one that has higher privileges, and opens files (with read access only), then passes the handles to the actual scanner, which runs as low privilege, so that the obvious buffer overflow attacks only get low privilege, and even if they achieve remote execution, can only scan data.
   That’s how it seems, anyway. 🙂