eTrust EZ Armor vulnerability (EZ antivirus all versions except 7.x)

  • Thread starter Thread starter Mel
  • Start date Start date
M

Mel

(The EZ armor given away by Microsoft last year included EZ antivirus version 6.1)

"Computer Associates Int'l., Inc. has confirmed the presence of a Medium-Risk vulnerability that affects the ability of eTrust EZ
Antivirus to properly filter specially formatted .ZIP files
This vulnerability affects our decompression engine (Arclib.dll) which is embedded into the following supported versions of eTrust
EZ Antivirus and eTrust EZ Armor:"

Press release:-

http://www.my-etrust.com/news/pressreleasedetails.cfm?pressReleaseID=27

Details:-

http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=2221


My PC crashed on rebooting after I manually updated arclib.lib, however after another
reboot EZAntivirus 6.1 is working ok.



Microsoft are distributing eTrust EZ Antivirus 2005 with their "Partnership Pack"
(appears to be free?) but requires net framework :(

http://www.microsoft.com/windows/partnerpack/
 
Mel said:
(The EZ armor given away by Microsoft last year included EZ antivirus version 6.1)

"Computer Associates Int'l., Inc. has confirmed the presence of a Medium-Risk vulnerability that affects the ability of eTrust EZ
Antivirus to properly filter specially formatted .ZIP files
This vulnerability affects our decompression engine (Arclib.dll) which is embedded into the following supported versions of eTrust
EZ Antivirus and eTrust EZ Armor:"

Press release:-

http://www.my-etrust.com/news/pressreleasedetails.cfm?pressReleaseID=27

Details:-

http://crm.my-etrust.com/login.asp?username=guest&target=DOCUMENT&openparameter=2221


My PC crashed on rebooting after I manually updated arclib.lib, however after another
reboot EZAntivirus 6.1 is working ok.
Click to expand...

****This upgrade it for EZ Antivirus standalone users only. For EZ Armor
users, we are currently testing a full upgrade of eTrust EZ Armor to be
released around November 1, 2004. As eTrust EZ Armor is a more complex
product, it requires more rigorous testing and certification prior to
release. We do not recommend that users with eTrust EZ Armor install the
upgrade of eTrust EZ Antivirus****

Can't find the link where I found the above at their site but I happened
to have saved the page. Not sure if this refers to the arclib.lib as well??
 
miskairal said:
****This upgrade it for EZ Antivirus standalone users only. For EZ Armor
users, we are currently testing a full upgrade of eTrust EZ Armor to be
released around November 1, 2004. As eTrust EZ Armor is a more complex
product, it requires more rigorous testing and certification prior to
release. We do not recommend that users with eTrust EZ Armor install the
upgrade of eTrust EZ Antivirus****

Can't find the link where I found the above at their site but I happened
to have saved the page. Not sure if this refers to the arclib.lib as well??
Click to expand...

That's from the press release, it suggests EZ Armor users install arclib,
rather that installing the upgrade version of EZ Antivirus.

"eTrust EZ Antivirus Users - Upgrade to eTrust EZ Antivirus r7"

"eTrust EZ Armor Users - Manually update your current Arclib.dll file to version 7.2.0.21"


If the EZ Antivirus upgrade is the same as the new 2005 version Microsoft seem to be
giving away, I might just as well get the new version via the Microsoft offer with a fresh
1 year licence, as my last free 1 year licence must be getting close to expiring anyway.

see:- http://www.microsoft.com/windows/partnerpack/desc/etrust.htm

However since it requires Microsoft's .Net Framework I'll probably give it a miss
and go back to AVG.
 
miskairal said:
****This upgrade it for EZ Antivirus standalone users only. For EZ Armor
users, we are currently testing a full upgrade of eTrust EZ Armor to be
released around November 1, 2004. As eTrust EZ Armor is a more complex
product, it requires more rigorous testing and certification prior to
release. We do not recommend that users with eTrust EZ Armor install the
upgrade of eTrust EZ Antivirus****

Can't find the link where I found the above at their site but I happened
to have saved the page. Not sure if this refers to the arclib.lib as well??
Click to expand...

That's from the press release, it suggests EZ Armor users install arclib,
rather than installing the upgrade version of EZ Antivirus.

"eTrust EZ Antivirus Users - Upgrade to eTrust EZ Antivirus r7"

"eTrust EZ Armor Users - Manually update your current Arclib.dll file to version 7.2.0.21"

(I've still got the new Arclib installed and I haven't had any further problems with it
since the initial crash on reboot)

If the EZ Antivirus upgrade is the same as the new 2005 version Microsoft seem to be
giving away, I might just as well get the new version via the Microsoft offer with a fresh
1 year licence, as my last free 1 year licence must be getting close to expiring anyway,
(and when it expires both the firewall and anti-virus are disabled).

see:- http://www.microsoft.com/windows/partnerpack/desc/etrust.htm

However since it requires Microsoft's .Net Framework I'll probably give it a miss
and go back to AVG.
 
Back
Top