WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a files name.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Spy_sweeper | Webroot_software | * | 4.5.9 (including) |
References
- http://www.osvdb.org/27538
- http://www.securityfocus.com/archive/1/437814/100/200/threaded
- http://www.sentinel.gr/advisories/SGA-0001.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27272
- http://www.osvdb.org/27538
- http://www.securityfocus.com/archive/1/437814/100/200/threaded
- http://www.sentinel.gr/advisories/SGA-0001.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27272