N/A

F-Secure Anti-Virus does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers to execute arbitrary code via malware that is correctly detected by this product, but with a detection approach that occurs too late to stop the code execution. NOTE: the researcher indicates that a vendor response was received, stating that "the inability to catch these files are caused by lacking functionality rather than programming errors."

N/A

N/A

F-Secure Anti-Virus 权限许可和访问控制漏洞

F-Secure Anti-Virus是芬兰F-Secure公司的一套杀毒软件。该软件集成了多个病毒监测引擎，可对操作系统进行实时病毒扫描，并提供了强大的后台管理功能。 F-Secure Anti-Virus中存在漏洞，该漏洞源于处理微软帮助和支持中心的hcp:// URLs未正确交互。远程攻击者可利用该漏洞通过正确的检测，但已太晚去阻止代码执行的检测方法产品的恶意软件，执行任意代码。注意：研究人员表示，供应商收到回应，指出‘无法捕捉这些文件，源于功能的缺陷而不是编程的错误’。

N/A

N/A