Security Flaw Found in Microsoft Virus Scanner – eSecurity Planet
Microsoft recently released a patch for a vulnerability in its virus scanner.
"When performing a virus scan, Microsoft's Malware Protection Engine fails to process a specially crafted registry value correctly, enabling local attackers with restricted privileges to execute arbitrary code at system privilege level (privilege escalation)," The H Security reports.
"According to Microsoft's advisory, the vulnerable anti-malware engine (mpengine.dll) is part of the Security Essentials (MSE), Windows Live OneCare, Windows Defender, Forefront Client Security and Forefront Endpoint Protection 2010 products as well as the Malicious Software Removal Tool," the article states.
Click here to read the article at The H Security.
For regular security news updates, follow eSecurityPlanet on Twitter: @eSecurityP.
This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read our FAQ page at fivefilters.org/content-only/faq.php
Five Filters featured article: Collateral Damage - WikiLeaks In The Crosshairs.
