News

CA Issues Upgrade for WebScan Flaw

CA is recommending that users of its popular eTrust Antivirus WebScan upgrade to protect against flaws that can allow a remote attacker to execute arbitrary code or compromise the integrity of the WebScan software. 

In a posting to the full-disclosure security mailing list, Ken Williams, director of CA Vulnerability Research acknowledged two flaws in the free, Web-based virus scanner, versions prior to 1.1.0.1048.

According to the advisory, Antivirus WebScan 1.1.0.1047 and earlier fail to properly validate parameters. A second flaw is caused by a buffer overflow in WebScan. The antivirus scanner is affected when running on Microsoft Windows Internet Explorer 4.0 or above.

CA ranks the vulnerabilities as medium-risk and says exploitation is non-trivial.

Matt Murphy of the TippingPoint Security Research Team is credited with discovering the flaws.

About the Author

Shawna McAlearney is a senior web editor at Application Development Trends. She can be reached at smcalearney@1105media.com.

Featured

Most   Popular
Upcoming Events

AppTrends

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.