Capicom.dll, MS07-028 and SAV

A posting on the MyITForum.com SMS discussion list reports that Symantec Antivirus 10.x and above may include a capicom.dll.
MS07-028 says that third party applications that distribute the Software Development Kit version of capicom will need to be updated.

CAPICOM is a new security technology from Microsoft that allows Microsoft Visual Basic, Visual Basic Script, ASP, and C++ programmers to easily incorporate digital signing and encryption into their application.

CAPICOM can be used to enable the following tasks:

• Digitally sign data with a smart card or software key
• Verify digitally signed data
• Graphically display certificate information
• Inspect certificate properties such as subject name or expiration date
• Add and remove certificates from the certificate stores
• Encrypt and decrypt data with a password
• Encrypt and decrypt data using public keys and certificates

It is not know yet whether we can just replace the vulnerable version of capicom ourselves, or if we need to wait for a SAV update. If its the latter can this be a liveupdate fix or will a MSP be issued.

Related posts:

1. Key tols in java security
2. Digital certificate
3. EFS Encrypting file system
4. Browser security strength
5. MS07-013 and Windows 2003 sp2
6. What type of validation is required in ssl

Related posts brought to you by Yet Another Related Posts Plugin.