F-Secure update their security applications

F-Secure update their security applications

Security application developers F-Secure have released patches to fix security related issues in their software applications. These patches are for both Windows OS and Linux versions of their products. These bugs were revealed by an independent security advisor and relates to how the application handles the compressed file formats like RAR and ZIP.

The flaw meant that maliciously crafted compressed files could be used to create a buffer overflow on PCs defended with F-Secure titles. This could further be used to load customized code on the victim’s computer leading to possible intrusions. This code is not recognized by the software application and hence the user has no way to see if his machine is infected or not.

F-Secure labeled these flaws critical and have worked fast on releasing the updates for their existing applications available in the market. The patches are available for free on their website for download. F-Secure’s director of anti-virus research, Mikko Hypponen said in a statement on these fixes: “Our guidance is the same as for patches from any other vendor: Patch now before someone figures out how to exploit the vulnerability.”

He added: “At the moment we are not aware of any attacks that would have used this vulnerability.”