0DAY漏洞进展：24h内已经解决！

pal家族

http://forum.kaspersky.com/index ... 1&#entry2464601

Hello.

Our statement on this is as follows:
We would like to thank Mr. Tavis Ormandy for reporting to us a buffer overflow vulnerability, which our specialists fixed within 24 hours of its disclosure. A fix has already been distributed via automatic updates to all our clients and customers.
We’re improving our mitigation strategies to prevent exploiting of inherent imperfections of our software in the future. For instance, we already use such technologies as Address Space Layout Randomization (ASLR) and Data Execution Prevention (DEP).
Kaspersky Lab has always supported the assessment of our solutions by independent researchers. Their ongoing efforts help us to make our solutions stronger, more productive and more reliable.

Thank you!

For both version 2015 and version 2016 ?

Provided was basically the same vulnerability which existed in both versions. The fix came with a module update which are fetched along with the definition updates and remain the same in different product versions.

Thank you.

pal家族

感谢Mr. Tavis Ormandy向我们报告了这个缓冲器溢出漏洞，这个漏洞在曝光的24h之内已经被我们的砖家解决了
通过自动更新，我们已经向用户推送了修正补丁。
吹B ing，巴拉巴拉~~~~
~~~~~~
~~
2015 2016两个版本的这个漏洞都在推送病毒定义时一同推送了修正补丁
~么么哒能给个高亮吗？@屁颠屁颠

steven_lzs

解决的速度还是可以的.

dongwenqi

很好，坐等推送更新

a908499916

卡巴第一次这么快解决

lai001lai007

现在已经更新掉了吗？

愛，不簡單

更新了没

pal家族

dongwenqi 发表于 2015-9-9 13:05
很好，坐等推送更新

已经更新了啊。@lai001lai007 @愛，不簡單 更新了没
.....

dongwenqi

pal家族 发表于 2015-9-9 16:27
已经更新了啊。@lai001lai007 @愛，不簡單 更新了没
.....

哦，会去看看

pal家族

dongwenqi 发表于 2015-9-9 16:33
哦，会去看看

没有版本升级，是通过特征库更新一起更新掉的。。。