Showing posts with label kaspersky. Show all posts
Showing posts with label kaspersky. Show all posts

Jun 26, 2007

[World Domination] Don't try this at all

This is not the way to advance your company's way to world domination:

During a presentation to announce Symantec's latest product, a spokesman for the company delivered an enthusiastic pitch to a roomful of big name clients. Indeed, such was the emphasis on the "uniqueness" of his company's offering that attendees could have been forgiven for thinking that no one else made anti-virus software.
...
During the wrap-up to his presentation, the spokesman was forced to query collective laughs, and quite possibly shouts of "it's behind you", by turning to face his presentation screen.

He found the source of their amusement in the form of a prominent pop-up box, obscuring his Powerpoint presentation, stating that the rival Kaspersky anti-virus software loaded on the machine he was using to present had updated its definitions.

Oops.


Lesson 1: use your own product.

Lesson 2: if you don't trust and use your own product, it's time to quit.

Lesson 3: do not use a test machine/competitor testing machine for presentation use.

Lesson 4: 99% of salesmen are liars. Yes, I made that figure up. Go figure.

(Crossposted from here.)

Apr 10, 2007

[Security] Two Kaspersky Vulnerabilities

Two vulnerabilities regarding Kaspersky security products have been disclosed by iDefense.

There is a heap overflow vulnerability in Kaspersky Internet Security Suite. This vulnerability allows for a remote code execution.

Kaspersky's response is here.

An information disclosure vulnerability is discovered involving Kaspersky Antivirus (version 6). This vulnerability could allow malicious Web sites to obtain files from a user's computer. The danger here is that in this vulnerability, no dialog nor warning window is shown when a malicious script starts a file transfer.

Kaspersky's response for this vulnerability is here.

Kaspersky users are advised to install Maintenance Pack 2 to patch these vulnerabilities.

NOTE: Remote code execution occurs when an outsider is able to execute a program on a remote computer through holes in the computer, either via vulnerabilities or backdoors. An information disclosure occurs when a vulnerable application allows an outsider to gain/steal any information.