Symantec AV Vulnerability

Cut and past from Slashdot...

+--------------------------------------------------------------------+
| Symantec Antivirus May Execute Virus Code |
| from the antivirus-not-so-anti dept. |
| posted by Zonk on Thursday February 10, @10:35 (Security) |
| http://it.slashdot.org/article.pl?sid=05/02/10/1327220 |
+--------------------------------------------------------------------+

An anonymous reader writes "[0]Symantec has admitted that a serious
vulnerability exists in the way its scanning engine handles Ultimate
Packer for Executables. According to a ZDNet article, this means the
scanner would execute the malicious program instead of catching it. Tim
Hartman, senior technical director for Symantec Asia Pacific, said: "A
vulnerability is not a vulnerability till somebody discovers it but
because this is now known, somebody could craft an e-mail, mass mailer or
a virus that takes advantage of it. It affects our firewalls, antispam,
all the retail products and the enterprise products as well"" Symantec
recommends you [1]immediately patch your software.

Discuss this story at:
http://it.slashdot.org/comments.pl?sid=05/02/10/1327220

Links:
0. http://www.zdnet.com.au/news/security/0,2000061744,39180674,00.htm
1. http://www.symantec.com/techsupp/cgi-bin/menu.cgi?URL=/downloads/index.html

 

....