Symantec Confirms AV Library Flaw, Promises Patch

the_flyswatter writes "Anti-virus vendor Symantec Corp. has publicly acknowledged that a high-risk buffer overflow vulnerability in its AntiVirus Library could lead to code execution attacks when RAR archive files are scanned. The company confirmed the issue was a buffer overflow in the AntiVirus component used to decompose RAR (Roshal Archive) files. 'A specially crafted RAR file could potentially cause this buffer overflow to occur and execute hostile content from the RAR file,' the advisory read. The bug also affects 15 consumer products, including the widely deployed Symantec Norton AntiVirus, Symantec Norton Internet Security Professional, Norton Personal Firewall and Symantec Norton Internet Security for Macintosh."

Comments

Re:You know what this means -

[Anonymous Coward]

first post

Re:You know what this means -

[Jotii]

You replied to another post, how was your reply supposed to have been the first post?

Oh, you just clarified the post above was the first post. Sorry.

FIRST POST

[Anonymous Coward]

to them...then Be 'very poorl7 Into a sling unless another folder. 20 users. Surprise Do and doing what Users. This is

F2irst!?

[Anonymous Coward]

Disease5. The