Author Topic: Latest AVAST update appears to block the FREAK attack  (Read 6005 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Latest AVAST update appears to block the FREAK attack
« on: March 07, 2015, 12:27:14 AM »
Saw something while reading the news about a new SSL/TLS vulnerability called the FREAK attack. Being curious, I tested my computers using the https://freakattack.com/ test page. This page reported that both Firefox browser and Internet Explorer browser were vulnerable on my computers. I didn't expect the Firefox browser to fail, so I searched the Firefox forum and found a post saying an Avast update fixed this. Which sounded curious, but turned out to be true. Updating Avast program and virus definitions fixes the vulnerability for both Firefox and Internet Explorer on my computers. Thanks for the updated program (2015.10.2.2214)!

Offline abruptum

  • Massive Poster
  • ****
  • Posts: 2460
Re: Latest AVAST update appears to block the FREAK attack
« Reply #1 on: March 07, 2015, 11:22:32 AM »
I can confirm this. IE11 and FF 36.0.1 are not vulnerable with Avast 2015.10.2.2214.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Latest AVAST update appears to block the FREAK attack
« Reply #2 on: March 07, 2015, 11:24:38 AM »
Opera 12.17
Windows XP sp3
All shields disabled
Not vulnerable  ;D

REDACTED

  • Guest
Re: Latest AVAST update appears to block the FREAK attack
« Reply #3 on: March 07, 2015, 12:57:17 PM »
Nice!!   :D

REDACTED

  • Guest
Re: Latest AVAST update appears to block the FREAK attack
« Reply #4 on: March 08, 2015, 08:35:10 PM »
IE 11 (11.0.16) is vulnerable here with Avast 2015.10.2.2214. Maybe that's because I am not using HTTPS scanning by Avast

Firefox 37 beta and Chrome 41 are safe from the attack.

REDACTED

  • Guest
Re: Latest AVAST update appears to block the FREAK attack
« Reply #5 on: March 08, 2015, 09:11:41 PM »
Opera 12.17
Windows XP sp3
All shields disabled
Not vulnerable  ;D

Go Opera!  Works for me as well.

REDACTED

  • Guest
Re: Latest AVAST update appears to block the FREAK attack
« Reply #6 on: March 12, 2015, 02:44:46 PM »
Opera 12.17
Windows XP sp3
All shields disabled
Not vulnerable  ;D
What if you have enabled your shields?
You probably want to have real time scanning of files. But once your (or at least: MY) Avast is enabled I am vulnerable. Without shields I'm safe. Well, at least for FREAK. Not for files with virusses  :-\

Program version 2015.10.0.2208 (virus definitions 150312-0)

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 11239
  • No support PM's thanks
Re: Latest AVAST update appears to block the FREAK attack
« Reply #7 on: March 12, 2015, 02:52:31 PM »
Program version 2015.10.0.2208 (virus definitions 150312-0)
You should check the update thread at the top of the forum, latest version is 2015.10.2.2214 so you need to update https://forum.avast.com/index.php?topic=167184.0

REDACTED

  • Guest
Re: Latest AVAST update appears to block the FREAK attack
« Reply #8 on: March 13, 2015, 08:37:41 AM »
Thanks. Just when I noted my own version I thought "Hm, there might be a new version". Which there was indeed. And it fixed it.

Nevertheless, primarily wanted to point out that testing with shields disabled isn't enough. Enabling shields can make it worse (if you're not up to date, like I was  :-[)