Symantec AntiVirus Engine Vulnerable
Symantec has issued an advisory on a security vulnerability discovered within the web-based Administrative Interface of its AntiVirus Scan Engine. The flaw could lead to a buffer overflow that enables a remote attacker to execute arbitrary code and access a system.
Security firm iDefense discovered the problem, which is only a risk if the Web interface is enabled and open to outsiders. Symantec has issued a patch for the AntiVirus Scan Engine that can be downloaded through its support site. The company says it is unaware of any customers that were affected by the flaw.
15 Comments
