[clamav-users] ClamWin Portable DLL Hijack

Steve Basford steveb_clamav at sanesecurity.com
Thu Mar 9 11:28:38 UTC 2017


On Thu, March 9, 2017 11:03 am, Groach wrote:
> So what are we saying?
>
> Clamwin people need to be made aware of this?  Or ARE aware of this and
> complicit?
ClamWin should be aware of this by now... let's hope they make a statement
of what (if any the issues are) and what versions.

For example, here's how notepad++ handled the issue:
https://notepad-plus-plus.org/news/notepad-7.3.3-fix-cia-hacking-issue.html

-- 
Cheers,

Steve
Twitter: @sanesecurity




More information about the clamav-users mailing list