Post by @Viss@mastodon.social

so let me get this straight
microsoft defender, the built-in antivirus tool for windows

has a heap based buffer overflow that leads to remote code execution

if you get it to scan a file, and that file is crafted the right way.

the antivirus tool is the carrier for the execution of malware.

@Viss @nyanbinary Sufficiently advanced Windows services are indistinguishable from malware

@catsalad @nyanbinary my favorite is when defender decides another piece of windows is bad and attacks it

@Viss @nyanbinary I mean, it's not wrong... 😹

@gnate@ohai.social · 1 hour ago

@catsalad
Ah, autoimmune issues...
@Viss @nyanbinary

@catsalad @Viss considering the first 5 hits whenever you search any windows executable are "is this malware? "... Yip!