Archive Formats Kill Antivirus Products

nemiloc sends us to the F-Secure blog for breaking news about widespread vulnerabilities in programs that process archive files: "The Secure Programming Group at Oulu University has created a collection of malformed archive files. These archive files break and crash products from at least 40 vendors — including several antivirus vendors... including us." Here is test material from OUSPG and a joint advisory from Finnish and English security organizations. It isn't news that security products can have have security vulnerabilities. What makes this advisory important is that antivirus software is a perfect target. It is run in critical places with high privileges and auto-updates to keep versions coherent.

That's nothing

[Anonymous Coward]

Windows can crash over 9000 products.

Question

[TheMeuge]

So is this evolution, or intelligent design?

Re:Secure Platform without Anti-virus

[PC and Sony Fanboy]

... if only that secure platform was more customizable and less fruity.

Re:That's nothing

[thousandinone]

What?!? Nine Thousand?!?

Re:Proofread?

[Em Adespoton]

If you can put an apostrophe in its, he can definitely remove the comma from "yeah, right."

Re:Secure Platform without Anti-virus

[SQLGuru]

Apparently, you're just too lazy to work on it.....this guy went so far as to make an Apple II web server:
http://www.ld8.org:6502/ [ld8.org]

Or a list of other older Apple hardware http://www.ld8.org/servers/servers_apple2.html [ld8.org]

Layne

Re:hmm, actually, if only for virus protection...

[Chris Mattern]

Are you kidding? Do you know how long it's been since Eniac came out with security update patches?