On 21 Dec, Security researcher Alex Wheeler has released
an advisory that could affect Symantec's antivirus products
including gateway, server, and client versions on most platforms.

Symantec Antivirus Library will decompress the RAR file when i
t does virus analysis. During the process, Symantec is vulnerable
to multiple heap overflows allowing attackers complete control of
the system. I

This flow allows attackers unauthorized control of
data and related privileges.

Source:
http://www.rem0te.com/public/images/symc2.pdf

Reply