Symantec Anti-Virus Flaw Patched
May 31, 2006
CNET news.com reported on May 30 that researchers at eEye Digital Security discovered a vulnerability in Symantec's Client Security 3.1 and AntiVirus Corporate Edition 10.1 software; the Norton line of consumer antivirus products remained unaffected. From eEye's website: "Description: A remotely exploitable vulnerability exists within the Symantec Antivirus program. This flaw does not require any end user interaction for exploitation and can compromise affected systems, allowing for the execution of malicious code with SYSTEM level access."
On May 31 CIO Today reported that the vulnerability had been patched.
Symantec has released Intrusion Prevention System (IPS) signatures via LiveUpdate for Symantec Client Security, to provide protection against the vulnerability.
