Avast disables JavaScript engine in its antivirus following major bug - News n Feeds<\/title>\n<meta name=\"description\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta property=\"og:description\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\" \/>\n<meta property=\"og:site_name\" content=\"News n Feeds\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-13T00:02:49+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newsnfeeds.com\/#website\",\"url\":\"https:\/\/newsnfeeds.com\/\",\"name\":\"News n Feeds\",\"description\":\"Latest ,Bollywood,Sports,World,Fashion, Gujarati News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/newsnfeeds.com\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#webpage\",\"url\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"name\":\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\",\"isPartOf\":{\"@id\":\"https:\/\/newsnfeeds.com\/#website\"},\"datePublished\":\"2020-03-13T00:02:49+00:00\",\"dateModified\":\"2020-03-13T00:02:49+00:00\",\"author\":{\"@id\":\"https:\/\/newsnfeeds.com\/#\/schema\/person\/93394ecd743a29fc38a70f011a36788f\"},\"description\":\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\",\"breadcrumb\":{\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/\",\"url\":\"https:\/\/newsnfeeds.com\/\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"position\":2,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"url\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"name\":\"Avast disables JavaScript engine in its antivirus following major bug\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newsnfeeds.com\/#\/schema\/person\/93394ecd743a29fc38a70f011a36788f\",\"name\":\"Kaushal\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/newsnfeeds.com\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/af9f794cb14b3f356a556b32538d9fb6?s=96&d=wp_user_avatar&r=g\",\"caption\":\"Kaushal\"}}]}<\/script>\n","_links":{"self":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts\/102226"}],"collection":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/comments?post=102226"}],"version-history":[{"count":0,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts\/102226\/revisions"}],"wp:attachment":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/media?parent=102226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/categories?post=102226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/tags?post=102226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

Avast<\/a> has decided to disable a major comportment of its antivirus software<\/a> after a security researcher discovered a dangerous vulnerability that could put all of the company’s users at risk.<\/p>\n

The security flaw, which was first discovered by Google’s Tavis Ormandy<\/a>, was found in the company’s JavaScript engine. This internal component of Avast antivirus allows for JavaScript code to be analyzed for malware before it’s allowed to execute in browsers or email clients.<\/p>\n

In a GitHub page<\/a> containing the tool he used to analyze the company’s antivirus software, Ormandy explained just how serious the security flaw is, saying:<\/p>\n

Avast anti-tracking system<\/a> actually exposed users<\/li>\n
Avast: Why IoT security should be your number one security worry<\/a><\/li>\n
Avast shuts down Jumpshot<\/a> after data-selling controversy<\/li>\n<\/ul>\n
“Despite being highly privileged and processing untrusted input by design, it is unsandboxed and has poor mitigation coverage. Any vulnerabilities in this process are critical, and easily accessible to remote attackers.”<\/p>\n
JavaScript engine security flaw<\/h3>\n
Exploiting the kind of bug that Ormandy discovered in Avast’s JavaScript engine is actually quite easy and an attacker would only need to send a user a malicious JavaScript or Windows Script Host file via email to do so.<\/p>\n
Due to the fact that most antivirus software has system level access, once Avast antivirus downloaded one of these malicious files into its own custom engine, an attacker could easily execute malicious operations on a user’s computer. For instance, if an attacker exploited this security flaw, they would then have the ability to install malware<\/a> on an Avast user’s device.<\/p>\n
Although the company has been aware of the bug for almost a week, it has not yet released a patch to fix the issue and instead, it decided to disable its antivirus’ ability to scan JavaScript code until one is ready.<\/p>\n
As of now, there is no news as to when a patch will be ready but Avast did reach out to ZDNet<\/em><\/a> with the following comment, which reads:<\/p>\n
“Last Wednesday, March 4, Google vulnerability researcher Tavis Ormandy reported a vulnerability to us affecting one of our emulators. The vulnerability could have potentially been abused to carry out remote code execution. On March 9, he released a tool to greatly simplify vulnerability analysis in the emulator. We have fixed this by disabling the emulator, to ensure our hundreds of millions of users are protected from any attacks. This won’t affect the functionality of our AV product, which is based on multiple security layers.”<\/p>\n
\n
We’ve also highlighted the best antivirus<\/a> software<\/li>\n<\/ul>\n
Via ZDNet<\/a><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
Avast has decided to disable a major comportment of its antivirus software after a security researcher discovered a dangerous vulnerability that could put all of the company’s users at risk. The security flaw, which was first discovered by Google’s Tavis Ormandy, was found in the company’s JavaScript engine. This internal component of Avast antivirus allows […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"tdm_status":"","tdm_grid_status":"","spay_email":""},"categories":[9],"tags":[50,37,46,49,51],"jetpack_featured_media_url":"","yoast_head":"\nAvast disables JavaScript engine in its antivirus following major bug - News n Feeds<\/title>\n<meta name=\"description\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta property=\"og:description\" content=\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\" \/>\n<meta property=\"og:url\" content=\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\" \/>\n<meta property=\"og:site_name\" content=\"News n Feeds\" \/>\n<meta property=\"article:published_time\" content=\"2020-03-13T00:02:49+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/newsnfeeds.com\/#website\",\"url\":\"https:\/\/newsnfeeds.com\/\",\"name\":\"News n Feeds\",\"description\":\"Latest ,Bollywood,Sports,World,Fashion, Gujarati News\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/newsnfeeds.com\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#webpage\",\"url\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"name\":\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\",\"isPartOf\":{\"@id\":\"https:\/\/newsnfeeds.com\/#website\"},\"datePublished\":\"2020-03-13T00:02:49+00:00\",\"dateModified\":\"2020-03-13T00:02:49+00:00\",\"author\":{\"@id\":\"https:\/\/newsnfeeds.com\/#\/schema\/person\/93394ecd743a29fc38a70f011a36788f\"},\"description\":\"Avast disables JavaScript engine in its antivirus following major bug - News n Feeds\",\"breadcrumb\":{\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/\",\"url\":\"https:\/\/newsnfeeds.com\/\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"position\":2,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"url\":\"https:\/\/newsnfeeds.com\/avast-disables-javascript-engine-in-its-antivirus-following-major-bug\/\",\"name\":\"Avast disables JavaScript engine in its antivirus following major bug\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/newsnfeeds.com\/#\/schema\/person\/93394ecd743a29fc38a70f011a36788f\",\"name\":\"Kaushal\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/newsnfeeds.com\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/af9f794cb14b3f356a556b32538d9fb6?s=96&d=wp_user_avatar&r=g\",\"caption\":\"Kaushal\"}}]}<\/script>\n","_links":{"self":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts\/102226"}],"collection":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/comments?post=102226"}],"version-history":[{"count":0,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/posts\/102226\/revisions"}],"wp:attachment":[{"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/media?parent=102226"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/categories?post=102226"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsnfeeds.com\/wp-json\/wp\/v2\/tags?post=102226"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

JavaScript engine security flaw<\/h3>\nExploiting the kind of bug that Ormandy discovered in Avast’s JavaScript engine is actually quite easy and an attacker would only need to send a user a malicious JavaScript or Windows Script Host file via email to do so.<\/p>\n