Several Major AV Products Have A Common Flaw

If you run McAfee VirusScan Enterprise version 8.8, Kaspersky Total Security 2015, and AVG Internet Security 2015, you need to update your software right now. According to enSilo via a a blog post, all three AV apps allocate memory for read, write, and execute (RWX) permissions in a predictable address that an attacker could use to inject code into a target system. On top of that, enSilo has created a free checking utility called AVulnerabilityChecker and stuck it on Github for anyone to use to see if they are affected.

Intel, owner of McAfee, and Kaspersky have now fixed the issue. Ditto for AVG. If you haven’t updated your AV apps lately, you should do so now.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading