Are we safe now?

Oct 10, 2007 07:58 GMT  ·  By

This used to be just another one of those cases in which security software, instead of making you safer, actually made you more vulnerable - I hate it when that happens. A few weeks ago, I had an article in which I wrote that Kaspersky is a firm that offers reliable security software; well, an important part of delivering secure solutions is acknowledging flaws when they exist and patching up fast. This is probably one of the reasons Kaspersky is amongst the leaders on the market while others aren't!

A vulnerability had been disclosed earlier by Stephen Fewer of Harmony Security in Kaspersky's free online scanner. Luckily, the company assessed the issue as fast as they could and fixed the problem. As seen on the security firm's website, Kaspersky Online Scanner version 5.0.98.0 corrects the high-risk vulnerability KLV07-09 (CVE-2007-3675). Insufficient control of input parameters in the ActiveX component of Kaspersky Online Scanner version 5.0.93.1 and earlier versions could result in a buffer overflow which could potentially enable an attacker to execute malicious code on a user's computer.

So, if this should be exploited by a hacker, you could face serious issues, this is why it is advised to update, if you are affected by this vulnerability. The patch that Kaspersky had issued is available at this address.

So keep in mind that one of the most important parts about staying secure is to make sure that the programs you use have no flaws for hackers to take advantage of. A recent study has shown that hackers are now attacking utilities more than ever, with web browsers at top of their list. So why just sit around doing nothing, relying on luck to help you stay secure, when you could just patch and eliminate any fear? And this goes for any program, not just Kaspersky's Online Scanner - stay up-to-date and you'll be safer!