Panda AV suffers from security flaw

[polonus]

Hello forum members,


Panda AV has a security flaw & suffers from a buffer overflow in certain circumstances, that could lead to systems being compromised or taken over.
Read here: http://www.security.nnov.ru/Kdocument471.html

greets,

polonus

[Lisandro]

And avast? Will it suffer from this problem too?

[polonus]

Hallo Tech,

Read here: http://www.rem0te.com/public/images/panda.pdf The vulnerability (highly critical) is caused due to a boundary error in "pskcmp.dll" when performing Lempel-Ziv decompression of ZOO-archives. This can be exploited to cause a heap-buffer overflow and may allow arbitrary code execution when a malicious ZOO archive is scanned. Threat: system access from remote.
Solution: filter ZOO archives at email and proxy gateways.
Other vendors may have problems whenever they share this PANDA technology. Look here:
http://www.spywaredata.com/spyware/malware/pskcmp.dll.php

That is the best survey I can give you, else we here from Vlk, I guess (ustawiena ..).

greets from,

polonus

[Lisandro]

That is the best survey I can give you, else we here from Vlk, I guess (ustawiena ..).

Thanks...
Only the high gurus can drop a word here... it's behind my possibilities...