Can You Trust Your Antivirus Software?

Think that you are safe from virus infections because you run a name-brand antivirus program and keep it updated? Think again. iDefense.com has just issed an advisory of an Anti-Virus Software Detection Evasion Vulnerability that affects “… [antivirus scanning] engines provided by McAfee, Computer Associates, Kaspersky, Sophos, Eset and RAV.

The problem stems from the way most antivirus engines scan compressed (.zip) files. Some antivirus software skips the scan for files that have a zero size. The attacker need only place his payload into a compressed file and then set the file’s header information to report zero size in order to evade detection.

Read Full Story