用卡巴7系列一个多月来第一次要求重启（紧急更新）

16000

用咔吧7第一次更新重启， 不知道更新了什么东东

[ 本帖最后由 16000 于 2007-6-25 19:15 编辑 ]

danger

模块吧

wangjay1980

打上补丁A了

caocao

120以后的版本没有

shuiwenjian

貌似很重要的洋子  

blog

123没有补丁
是不是更新了klif.sys?

[ 本帖最后由 blog 于 2007-6-25 19:53 编辑 ]

16000

原帖由 blog 于 2007-6-25 19:50 发表
123没有
是不是更新了klif.sys?

不知道哪里看更新报告

zerosu6652

修改KLV07-07.Klif.sys 不能稳定调用NtOpenProcess 的弱点

blog

原帖由 zerosu6652 于 2007-6-25 19:52 发表
修改KLV07-07.Klif.sys 不能稳定调用NtOpenProcess 的弱点

好像123比119的改进的重要一点是改进NtOpenProcess

http://www.kaspersky.com/technews?id=203038695

KLV07-07.Klif.sys calling NtOpenProcess vulnerability
An advisory has recently been published on rootkit.com regarding a vulnerability in KAV 7.0. Unfortunately, the authors of this material chose not to adhere to industry standard practice, and contact the vendor prior to disclosing vulnerability details. Although the authors claim that all attempts to inform Kaspersky Lab about this vulnerability were ignored, this is not the case: if we had been informed, this issue would have been addressed long ago.

The following products are vulnerable:

Kaspersky Internet Security 6.0/7.0
Kaspersky Anti-Virus 6.0/7.0
Kaspersky Anti-Virus for Windows Workstations 6.0
Kaspersky Anti-Virus 6.0 for Windows Servers
These products are vulnerable only when run on the following OSs:

Windows NT
Windows 2000
Windows 2003 x86
Windows XP x86
Products running on other Microsoft OS are not affected by this issue.

This vulnerability is classified as low risk because of its local nature: the user has to manually launch the exploit on his computer. Exploiting the vulnerability results in a critical system error (BSOD) but does not escalate privileges or provide a remote user with control over the computer.

A patch will be issued for this vulnerability in the very near future. The patch will install itself automatically. Additional information will be provided about patch release.

  06.09.2007   

   

[ 本帖最后由 blog 于 2007-6-25 19:58 编辑 ]

blog

原帖由 16000 于 2007-6-25 19:52 发表

不知道哪里看更新报告

如果你的卡巴打开了报告
你在升级报告中就可以看到更新哪些内容