Thursday, February 10, 2005

Symantec Antivirus May Execute Virus Code

Slashdot | Symantec Antivirus May Execute Virus Code: "'Symantec has admitted that a serious vulnerability exists in the way its scanning engine handles Ultimate Packer for Executables. According to a ZDNet article, this means the scanner would execute the malicious program instead of catching it. Tim Hartman, senior technical director for Symantec Asia Pacific, said: 'A vulnerability is not a vulnerability till somebody discovers it but because this is now known, somebody could craft an e-mail, mass mailer or a virus that takes advantage of it. It affects our firewalls, antispam, all the retail products and the enterprise products as well'' Symantec recommends you immediately patch your software."

No comments: