Absence of ASLR in anti virus component, how grave can it be?

what is the importance of ASLR in anti virus component? In a situation whereby ASLR is absent in some anti virus program components and a potential denial-of-service issue when scanning nested archives, how critical can these be to the overall security of the user? What is the best approach to an anti virus prog without ASLR?
