PC Antivirus Reviews 2010

2010 Antivirus Software Report

2010 PC Antivirus Firewall Software &
Internet Security Suite Reviews

VIPRE Antivirus + Antispyware
VIPRE
BitDefender Antivirus 2010
BitDefender
Kaspersky Anti-Virus 2010
Kaspersky
Panda Antivirus 2010
Panda
Norton AntiVirus 2010
Norton
McAfee VirusScan Plus 2010
McAfee
CA Anti-Virus 2010
CA
Trend Micro AntiVirus Plus 2010
Trend Micro
antivirus reviews
Get Free Antivirus Software Coupons!
Your Name
Your E-Mail
 
antivirus resources
 
antivirus help
PC Antivirus Update

Antivirus Update Home | More web browser security issues. Opera this time.... » | More news on the IE security flaw » | NoScript: A tool for securing your computer agains... » | New IE7 security exploit in the wild » | DNS Trojan on the loose. . . » | Facebook Koobface virus » | Connecticut Teacher - Spyware Trial » | London Hospitals Hit by a Virus. (No, the Other Vi... » | Symantec / Norton 60-day intro on Gateway & eMachi... » | Morro: Microsoft's free anti-virus / anti-malware »  

Monday, December 22, 2008  

Free Antivirus Software Security Problems

ComputerWorld.com brings notice today of problems with Trend Micro's free online antivirus scanner. Turns out there's a nasty little bug in the service that crackers can use to take over Microsoft Windows PCs via Internet Explorer.

The service, called HouseCall, is made available via ActiveX and exploits a particular vulnerability in the ActiveX control HouseCall uses.
'"The vulnerability is caused due to a use-after-free error in the HouseCall ActiveX control (Housecall_ActiveX.dll)," said Secunia's warning.

"This can be exploited to dereference previously freed memory by tricking the user into opening a Web page containing a specially crafted 'notifyOnLoadNative()' callback function."'
Trend Micro, in typically speedy fashion, has fixed the flaw, but we were very disappointed to read this in Trend Micro HouseCall ActiveX Control advisory,
'"This hot fix was developed as a workaround or solution to a customer-reported problem. As such, this hot fix has received limited testing and has not been certified as an official product update," Trend Micro said in its own advisory, published last Thursday.

"Consequently, this hot fix is provided 'as is'. Trend Micro makes no warranty or promise about the operation or performance of this hot fix nor does it warrant that this hot fix is error free."'
For a company like Trend Micro, who makes Trend Micro AntiVirus, who knows full well the issues with computer security, we were disappointed in them. They can do better.

We know they can. They know they can.

Links to this post

Create a Link

2010 PRODUCTS REVIEWED


Get informed...
Stay informed...

Want to get the latest news from our blog delivered straight to your inbox? (It's free.)

Enter your email address:




Copyright © 2010 pcAntivirusReviews.com