McAfee, creator of the popular McAfee anti virus software, has admitted that there is a flaw in one of their virus scan engines which could lead to an attacker compromising a PC. Discovered by ISS X-Force, McAfee believes that this problem only affects users running an older version of the McAfee VirusScan Engine.
The problem itself is a buffer overrun vulnerability, which may occur when a user is scanning Lha files. McAfee believes that this problem was fixed in release 4400 of their VirusScan engine, which was released in December 2004. Users running the earlier version of this engine, 4320, may still be at risk.
If customers have not upgraded to the latest version of the engine, McAfee has stated that customers running the 4436 DAT files and later should be protected.
McAfee believes that the number of users running the older version is very low, although we suspect that they do not have the data to back that claim up. We would recommend that if you are running McAfee anti virus software that you ensure it is updated to the latest product engine and DAT versions as soon as possible, as we would with any other anti virus product.
|
|
