Monday, November 13, 2017

Vulnerability in multiple antivirus virus can penetrate the machine control.


Florian Bogner, a researcher reported security vulnerabilities. AVGate of multiple antivirus, viruses can penetrate through the antivirus in order to gain control over a user's computer.

Usually, the antivirus will bring the suspicious files to Quarantine folder to verify the behaviour, but if the hacker knows the NTFS file system vulnerabilities, it can bring it back to put it in the folder C:\Windows or C:\Program Files.



This vulnerability allows viruses malware can reach administrator rights. The operating system security is quite good. But when the antivirus vendors administrator rights. It used to drill through the antivirus instead.

A program that finds the vulnerabilities of this nature, there are 6 program Emisoft, Ikarus, Kaspersky, Malwarebytes, Trend Micro, ZoneAlarm, which every patches solve the problem successfully. After hearing from Bogner, but he also said that there is another vulnerability found, 7 program are the same, and not to reveal their names for now.

No comments:

Post a Comment