Massive Security Hole in Symantec Products - Plan on Patching This Weekend!   2/11/2005 - 540 views,

Summary: A serious security flaw has hit several Symantec security products, many of which are in widespread use, says the company. The vulnerability is serious enough to have been been classified as "high risk". According to the Symantec site, the vulnerable component "fails to ...

Previous Article « Aunty’s Date with Online Tonight’s David Lawrence Moved to Thursdays
Read Next Article » Serious Vulnerability in Windows Media Player, Windows and MSN Messenger

A serious security flaw has hit several Symantec security products, many of which are in widespread use, says the company.

The vulnerability is serious enough to have been been classified as “high risk”. According to the Symantec site, the vulnerable component “fails to do proper bounds checks when analyzing certain container files for virus content. An attacker sending a specifically crafted UPX file could potentially compromise the targeted system.”

The company advises that systems which have not been upgraded to the latest version of any Symantec product should be immediately updated.

The list of affected products is long and wide, and includes:

Gateway Security 1.0/2.0
Norton Internet Security 2004
Norton Internet Security 2004 Professional
Norton SystemWorks 2004
AntiVirus Corporate Edition 8.0/9.0
AntiVirus for Caching 4.0
AntiVirus for Network Attached Storage 4.0
AntiVirus for SMTP Gateways 3.0
AntiVirus Scan Engine 4.0
Symantec AntiVirus/Filtering for Domino
Brightmail AntiSpam 4.0/5.0
Client Security 1.0/2.0
Mail Security for Exchange 4.0
Mail Security for SMTP 4.0
Norton AntiVirus 2004
Norton AntiVirus for Microsoft Exchange 2.0
Web Security 3.0

The full list, details, and update links can be found at the Symantec Security Response site.

Get FREE email alerts of new Internet Patrol stories!
    *We never share your email address with anyone

Email Address:
Date of first visit:
How you found us:

Be sure to watch for the confirmation email!

Subscribe
to The Internet Patrol on your cell phone    Email the link for this page to a friend!

Read more:

»  Security Hole in Word Allows Attack Through Email with Ginwui.a Trojan

»  Symantec to Acquire Brightmail

»  Security Hole in VoIP Lets Hackers Reach Out and Hear Someone

»  Worm Hole in Win2k, and Windows Protection as a Business Model

For additional similar stories check out our archives on Security

 

No Comments »

No comments yet.

RSS feed for comments on this post.

Leave a comment

Warning! All comments which contain URLs and are clearly just spam to generate a link back to the URL will be deleted on sight. Don't bother wasting your time!

If you are going to include a URL in your comment,
please keep it under 25 characters in length,
or use TinyURL to shorten it before including it in your comment.

Line and paragraph breaks are automatic, your email address is never displayed.
HTML allowed: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>

(required)

(required)


If you have not posted a comment here before, we apologize for having to ask you to enter the letters and numbers you see in the image above to validate your comment, but we are being attacked by thousands of comment form spams every day! You only need to do this once; once you have successfuly posted a comment here you will not be asked to do this again. Thank you for your understanding!

 
The Internet Patrol
Patrolling the Internet for You!