Symantec Flaws Found, Fixed

Symantec Flaws Found, Fixed
Spotlight shines on vendor for 3rd time in 2004

For the third time this year, Symantec has found themselves under fire for critical flaws found in their security applications. Though first reported privately on April 16, security firm eEye published the four latest exploits to their website on Wednesday, to which Symantec quickly responded. Three of the vulnerabilities allowed remote kernel access, while the fourth allowed a remote user to simply crash an impacted system. In January, an exploit in Symantec's "LiveUpdate" was exposed that would give a remote hacker admin rights. In March it was revealed that a flaw within an ActiveX component of Symantec's Norton Internet Security software could give intruders a backdoor into a protected system.
Please see these links for the full information regarding thease flaws

http://news.zdnet.co.uk/0,39020330,39154556,00.htm

http://www.eeye.com/html/Research/Advisories/index.html


http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html