back to article Antivirus apps are there to protect you – Cisco's ClamAV has a heckuva flaw

Antivirus software is supposed to be an important part of an organization's defense against the endless tide of malware. Cisco's open source ClamAV can fill that role – once you patch the 9.8/10 rated arbitrary code execution flaw the networking giant revealed on Wednesday. "A vulnerability in the HFS+ partition file parser …

  1. Lil Endian Silver badge
    Coat

    'Oystered by their own petard

    Patch now, don't limpet, before the rapscallops muscle in.

    At least Cisco said it how it is, no sugar coating.

  2. Kurgan

    The most useless software in the world

    I'll proceed to rip clamav from every mail server I manage (and there are a lot of them, sadly) because while it has been more or less useless (hit/miss ratio is sooooo low) now it's also plainly dangerous.

    1. Anonymous Coward
      Anonymous Coward

      Re: The most useless software in the world

      I always found ClamAV had so many false positives that it was not just useless, but dangerous if you allowed it to automatically quarantine what it "found".

    2. Version 1.0 Silver badge

      Re: The most useless software in the world

      My mail-server runs ClamAV and it stops 3/4 of all malware and virus deliveries, I stop the remaining 25% by quarantining all emails with potential infectious attachments e.g. Purchase Order.exe and Purchase Order_pdf (2).rar - two examples from this morning's deleted list.

    3. that one in the corner Silver badge

      Re: The most useless software in the world

      Hmm, didn't think using Macs as email servers was that popular, let alone a fleet of them.

      Live and learn.

  3. cosmodrome

    AV

    Antivirus is the definition of a cure having become worse than the disease.

  4. anothercynic Silver badge
    Facepalm

    Yay, buffer overruns...

    ... The developer's best friend. ;-)

  5. Marty McFly Silver badge
    Coat

    No exploit in the wild

    ClamAV would need market share for this to be a legitimate concern.

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon

Other stories you might like