Avast disables JavaScript engine in its antivirus following major bug

Avast has decided to disable a major comportment of its antivirus software after a security researcher discovered a dangerous vulnerability that could put all of the company’s users at risk.

The security flaw, which was first discovered by Google’s Tavis Ormandy, was found in the company’s JavaScript engine. This internal component of Avast antivirus allows for JavaScript code to be analyzed for malware before it’s allowed to execute in browsers or email clients.

GitHub page containing the tool he used to analyze the company’s antivirus software, Ormandy explained just how serious the security flaw is, saying:

• Avast anti-tracking system actually exposed users
• Avast: Why IoT security should be your number one security worry
• Avast shuts down Jumpshot after data-selling controversy

“Despite being highly privilege