Last month he found some in the famous Kaspersky antivirus.
According to Ormandy,the bug implemented itself when the user visited web pages through https connection.
Ormandy released aproof-of-concepton Project Zeros Google Group after the antivirus company issued a fix.
This is not the first time that antivirus has been found Vulnerable to attacks.
Same was the case with FireEyes antivirus engine.
source: www.techworm.net