Doctor Web improved security of its Dr.Web products 5.0 by closing several vulnerabilities that might allow malicious programs to bypass the self-protect of the anti-virus. However, Doctor Web didn't register any cases when the vulnerabilities had been exploited.
The update closes vulnerabilities of SpIDer Gate, SpIDer Mail and the Windows scanner that allowed to inject malicious code into anti-virus processes.
A vulnerability of the updating utility that allowed to start any process using rights of a user that launched the updating utility (administrator) is also neutralized.
Dr.Web Security Space, Dr.Web anti-virus 5.0 for Windows, Dr.Web Enterprise Suite, Dr.Web for Windows servers and the Dr.Web anti-virus service software will automatically retrieve the update upon a subsequent updating session.
Tell us what you think
To ask Doctor Web’s site administration about a news item, enter @admin at the beginning of your comment. If your question is for the author of one of the comments, put @ before their names.
Other comments