TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Bitdefender Anti-Virus: Heap Buffer Overflow via 7z LZMA

83 pointsby landavealmost 8 years ago

7 comments

jimrandomhalmost 8 years ago
With most types of software, if you&#x27;re stuck with C&#x2F;C++, you want to keep the development to a high standard where there aren&#x27;t any bugs like this. But anti-virus software is unusual in that it needs to handle malicious input of an unusually wide variety of file formats, which makes completely eliminating file-format vulnerabilities basically unfeasible without some sort of broadly-applicable fix.<p>That fix could be a memory-safe language, or it could be sandboxing. But the assumption should be that for any antivirus product which does its file-parsing in C or C++, and which doesn&#x27;t sandbox is scanning engine, there&#x27;s going to be at least one critical vulnerability in the scanner. Bitdefender is still unsandboxed, so fixing this particular vulnerability is only of limited use; there are almost certainly other, similar vulnerabilities in it, so users running it are vulnerable to anyone with the resources to find one.<p>AV companies have mostly gotten away with this sort of thing in the past, because individual AV scanners tend to have low enough market share that they aren&#x27;t as desirable targets as web browsers. But Windows Defender recently broke that trend by being present on every Windows system, and having a critical vulnerability, so now there are a lot more researchers looking at unsandboxed AV scanning engines and finding problems.
评论 #15077180 未加载
评论 #15076157 未加载
veetialmost 8 years ago
&gt; Moreover, the engine runs unsandboxed and as NT Authority\SYSTEM.<p>Is there an antivirus that _doesn&#x27;t_ parse untrusted input in a process with full system privileges? What a joke.
评论 #15076094 未加载
评论 #15076128 未加载
评论 #15076427 未加载
WalterBrightalmost 8 years ago
&quot;Assuming that the size is not explicitly casted, the compiler should throw a warning of the following kind:&quot;<p>In D, implicit truncation of an integer value is an error, not a warning.<p>I&#x27;ve predicted before that lack of memory safety will be the demise of C in internet-facing programs. Dealing with the bugs is just too expensive.
评论 #15077208 未加载
pmoriartyalmost 8 years ago
<i>&quot;Note also that Bitdefender’s engine is licensed to many different anti-virus vendors, all of which could be affected by this bug.&quot;</i>
评论 #15075859 未加载
foscoalmost 8 years ago
Might we agree to recommend to Microsoft users that they should use Microsoft AV. About 6 months ago we had a similar discussion [0] which arrived at that conclusion.<p>[0] <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13489100" rel="nofollow">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=13489100</a>
atomicalalmost 8 years ago
&gt; I want to thank Bitdefender and especially Marius for their response as well as for fixing the bug.<p>I don&#x27;t see an update for the mac version.
评论 #15076465 未加载
bullenalmost 8 years ago
Bitdefender has problems with HTTP comet stream. Stop buying it so the company can go bankrupt.