Symantec Anti-Virus Flaw Patched

May 31, 2006

CNET reported on May 30 that researchers at eEye Digital Security discovered a vulnerability in Symantec's Client Security 3.1 and AntiVirus Corporate Edition 10.1 software; the Norton line of consumer antivirus products remained unaffected. From eEye's website: "Description: A remotely exploitable vulnerability exists within the Symantec Antivirus program. This flaw does not require any end user interaction for exploitation and can compromise affected systems, allowing for the execution of malicious code with SYSTEM level access."

On May 31 CIO Today reported that the vulnerability had been patched.

Symantec has released Intrusion Prevention System (IPS) signatures via LiveUpdate for Symantec Client Security, to provide protection against the vulnerability.


Leave a Reply

Please log in using one of these methods to post your comment: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

%d bloggers like this: