Endpoint
8/15/2012
04:08 PM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%
Repost This

NSS Labs Tests Top Consumer Anti-Virus Products For Protection Against New Critical Microsoft Vulnerabilities

Nine of 13 popular consumer antivirus products tested failed to provide adequate protection against exploits

AUSTIN, Texas – August 15, 2012 - NSS Labs, Inc., the leader in test-based research and analysis of information security products, today released the report, "Can Consumer AV Products Protect Against Critical Microsoft Vulnerabilities?" where the results of testing showed that 9 of 13 popular consumer anti-virus products tested failed to provide adequate protection against exploits targeting two recent critical Microsoft vulnerabilities. Only 4 vendors – Avast, Kaspersky, McAfee and Trend Micro – successfully blocked all attacks delivered over both HTTP and HTTPS.

"This particular exploit test was a small part of a much more comprehensive endpoint security test underway at NSS Labs that will be published next month," said Randy Abrams, Research Director at NSS Labs. "These results clearly demonstrate protection deficiencies for many vendors when their products are configured with default 'out-of-the-box' settings, which are what's most commonly employed in the consumer market."

"This test revealed that numerous vendors that protected against an exploit over HTTP failed to protect against the same exploit delivered via HTTPS," said Bob Walder, Chief Research Officer at NSS Labs. "Vendors who did not perform well might want to reconsider their default settings in this age of attacks against SSL and other protocols."

"There are additional concerns for the enterprise," Abrams adds. "Enterprises embracing the 'bring your own device' (BYOD) approach to workplace technology need to be aware of the ramifications the product selection choices their users make, as they impact the organization's security posture and attack profile."

NSS Labs is currently running in-depth consumer end point protection (EPP) group testing that will further test all 13 vendors in several key areas – exploits, evasions, performance and protection against live malware, drive-by attacks and phishing. Reports featuring the results for each test area will be released as testing is completed – reports for exploits, evasions and performance are targeted for release in September 2012.

The 13 vendors tested in this report and in the current group tests include:

Avast

AVG

Avira

CA

ESET

F-Secure

Kaspersky

McAfee

Microsoft

Norman

Norton

Panda

Trend Micro

To read the full "Can Consumer AV Products Protect Against Critical Microsoft Vulnerabilities?" report, visit the NSS Labs website at https://www.nsslabs.com/research/analysis-briefs/can-consumer-av-products-protect.html

About NSS Labs, Inc.

NSS Labs, Inc. is the recognized leader in independent security research and testing. We provide subscription-based security intelligence to enterprises worldwide. Our test-based research and expert analyses provide information technology professionals with the unbiased data they need to select and maintain complex security products for their organizations. NSS Labs evaluates both network and endpoint security products, producing both individual Product Analysis Reports and group Comparative Analysis Reports. Group tests culminate in our exclusive Security Value Map. Founded in 1991, the company is located in Austin, Texas. For more information, visit www.nsslabs.com.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-0360
Published: 2014-04-23
Memory leak in Cisco IOS before 15.1(1)SY, when IKEv2 debugging is enabled, allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCtn22376.

CVE-2012-1317
Published: 2014-04-23
The multicast implementation in Cisco IOS before 15.1(1)SY allows remote attackers to cause a denial of service (Route Processor crash) by sending packets at a high rate, aka Bug ID CSCts37717.

CVE-2012-1366
Published: 2014-04-23
Cisco IOS before 15.1(1)SY on ASR 1000 devices, when Multicast Listener Discovery (MLD) tracking is enabled for IPv6, allows remote attackers to cause a denial of service (device reload) via crafted MLD packets, aka Bug ID CSCtz28544.

CVE-2012-3062
Published: 2014-04-23
Cisco IOS before 15.1(1)SY, when Multicast Listener Discovery (MLD) snooping is enabled, allows remote attackers to cause a denial of service (CPU consumption or device crash) via MLD packets on a network that contains many IPv6 hosts, aka Bug ID CSCtr88193.

CVE-2012-3918
Published: 2014-04-23
Cisco IOS before 15.3(1)T on Cisco 2900 devices, when a VWIC2-2MFT-T1/E1 card is configured for TDM/HDLC mode, allows remote attackers to cause a denial of service (serial-interface outage) via certain Frame Relay traffic, aka Bug ID CSCub13317.

Best of the Web