Symantec Vulnerability Found In AV

Threat Chaos Blog

 

From the above linked article:

 

That got me wondering if I was vulnerable. My desktop's NAV 2005 shows version 11.0.16.4, so it looks good. Then I checked the NAV 2004 on my wife's laptop, and it shows version 10.0.29.4. Not so good. Both are kept up to date, so here's hoping Symantec will plug the hole before trouble hits.

 

"May 26, 2006 -- Symantec Denies 'Highly Severe' Antivirus Flaw "

More details here:

http://www.internetnews.com/security/article.php/3609501

 

SYM06-010
May 25, 2006
Symantec Client Security and Symantec AntiVirus Elevation of Privilege
Revision History
May 26, 2006 - Updated Products Affected section and other details

Impact
High
Remote
Yes
Local
Yes
Authentication Required
No
Exploit publicly available
No


Overview
A stack overflow in Symantec Client Security and Symantec AntiVirus Corporate Edition could potentially allow a remote or local attacker to execute code on the affected machine.

Products Affected
Product Version Build Solution
Symantec Client Security 3.1 All Pending
Symantec Antivirus Corporate Edition 10.1 All Pending


Products Not Affected
Norton Product line No products in the Norton product line are affected
Details
Symantec was notified that Symantec Client Security and Symantec AntiVirus Corporate Edition are susceptible to a potential stack overflow. Exploiting this overflow successfully could potentially cause a system crash, or allow a remote or local attacker to execute arbitrary code with System level rights on the affected system.

Symantec Response
This advisory will be updated when product updates to address this issue are available.

Upgrade Information
Symantec engineers have verified that this vulnerability exists in the product versions listed above. We are continuing to evaluate other versions of our software. This advisory will be updated when additional information is available.

Symantec Advidsory

Source: SANS

 

Handler's Diary May 27th 2006

Symantec Patch Posted (NEW)
Published: 2006-05-27,
Last Updated: 2006-05-27 20:01:00 UTC by Deborah Hale (Version: 1)

Symantec Patch

SANS