IT Pro is supported by its audience. When you purchase through links on our site, we may earn an affiliate commission. Learn more

Researchers reveal Kaspersky and FireEye zero-day flaws

Russian anti-virus firm has already patched, while FireEye struggles to reach researchers

A red padlock with a binary code label surrounded by circuits.

Major vulnerabilities in products from Kaspersky Lab and FireEye could allow malicious actors to break into users' computers.

The issues have been found and disclosed over the weekend by two security researchers.

Tavis Ormandy, of Google, discovered a vulnerability that he described as "a remote, zero interaction SYSTEM exploit in default config. So, about as bad as it gets", and said it "works great on [versions] 15 and 16". The bug could apparently be easily used by hackers to compromise Kaspersky customers' systems.

In a statement, Kaspersky Lab told IT Pro: "We would like to thank Mr. Tavis Ormandy for reporting to us a buffer overflow vulnerability, which our specialists fixed within 24 hours of its disclosure. A fix has already been distributed via automatic updates to all our clients and customers."

"Kaspersky Lab has always supported the assessment of our solutions by independent researchers. Their ongoing efforts help us to make our solutions stronger, more productive and more reliable," the company concluded.

A total four FireEye flaws were discovered by independent information security consultant Kristian Erik Hermansen. In the case of the one he made public, an unauthorised remote root file system access vulnerability could allow hackers to leak sensitive company files.

Hermansen revealed the vulnerability on Sunday, claiming FireEye had no facility for reporting bugs.

"Regrettably, Hermansen published proof-of-concept code showing how the vulnerability could be triggered," said Graham Cluley, also a security researcher. "All [four] are said to be up for sale."

In a statement, FireEye told IT Pro: "We appreciate the efforts of security researchers like Kristian Jermansen and Rom Perrise to find potential security issues and help us improve our products, but always encourage responsible disclosure."

"FireEye has a documented policy for researchers to responsibly disclose and inform us of potential security issues. We have reached out to the researchers regarding these potential security issues in order to quickly determine, and potentially remediate, and impacts to the security of our platforms," the company added.

This article was originally published on 7 September and updated on 8 September with a statement from FireEye.

Featured Resources

The Total Economic Impact™ Of Turbonomic Application Resource Management for IBM Cloud® Paks

Business benefits and cost savings enabled by IBM Turbonomic Application Resource Management

Free Download

The Total Economic Impact™ of IBM Watson Assistant

Cost savings and business benefits enabled by Watson Assistant

Free Download

The field guide to application modernisation

Moving forward with your enterprise application portfolio

Free Download

AI for customer service

Discover the industry-leading AI platform that customers and employees want to use

Free Download

Recommended

Hackers could use new Wslink malware in highly targeted cyber attacks
malware

Hackers could use new Wslink malware in highly targeted cyber attacks

1 Nov 2021
FBI raids Chinese POS business following cyber attack claims
malware

FBI raids Chinese POS business following cyber attack claims

27 Oct 2021
Malware developers create malformed code signatures to avoid detection
malware

Malware developers create malformed code signatures to avoid detection

24 Sep 2021

Most Popular

Why convenience is the biggest threat to your security
Sponsored

Why convenience is the biggest threat to your security

8 Aug 2022
How to boot Windows 11 in Safe Mode
Microsoft Windows

How to boot Windows 11 in Safe Mode

29 Jul 2022
The benefits of a hardware update for SMBs
Sponsored

The benefits of a hardware update for SMBs

2 Aug 2022