McAfee glitch leads to false detections - Security Bytes
» VIEW ALL POSTS Jan 3 2008   7:05AM GMT

McAfee glitch leads to false detections



Posted by: Bill Brenner
Security Vendor News, Network Security, Application Security, Security Management

A reader emailed us yesterday warning that a link in our Dec. 20, 2007 Security Wire Perspectives email newsletter points to a page containing an exploit script. We puzzled over this one yesterday afternoon, but thanks to the folks at the SANS Internet Storm Center (ISC), the mystery appears to be solved.

According to ISC’s Pedro Bueno, others have reported that their AV was detecting the JS/Exploit-BO virus when visiting such sites as ESPN and Friendster.

It appears the problem is with the McAfee AV. He wrote that McAfee just released an emergency DAT to fix the false reading on some JavaScripts. The new DAT is available here.

Comment on this Post


You must be logged-in to post a comment. Log-in/Register