F-Secure issues patch for critical flaws

Iria

Security vendor F-Secure issued a patch Thursday to deal with critical flaws in a number of its antivirus and Internet security products.

Flaws in the way F-Secure software handles ZIP and RAR data compression archives could allow an attacker to execute remote code on users' systems and also to bypass F-Secure's antivirus-scanning capabilities.

Vulnerabilities were found in 19 versions of F-Secure's antivirus products for Microsoft Windows, as well as in its products for Linux, according to F-Secure's advisory.

F-Secure was originally advised of the scanning vulnerability by independent researcher Thierry Zoller, said Mikko Hypponen, F-Secure's chief research officer. In researching the bug, he said, "we found that the vulnerabilities were much more serious. We found it was not just the scanning that could be bypassed but also (that) a malicious attacker could execute code."
____________
Read More / Source: News.com