Symantec/Norton Antivirus ASPack Remote Heap/Pool memory corruption Vulnerability

nkawit

AllWorldIT
Company Rep
Joined
Nov 18, 2011
Messages
328
Reaction score
0
Location
Cape Town
ref: https://bugs.chromium.org/p/project-zero/issues/detail?id=820

... This is a remote code execution vulnerability. Because Symantec use a filter driver to intercept all system I/O, just emailing a file to a victim or sending them a link is enough to exploit it... making this a remote ring0 memory corruption vulnerability ...

Symantec products are vulnerable, this includes:

* Symantec Endpoint Antivirus (All platforms)
* Norton Antivirus (All platforms)
* Symantec Scan Engine (All platforms)
* Symantec Email Security (All platforms)
* ..and probably all other Symantec Antivirus products.

...
 
Top
Sign up to the MyBroadband newsletter
X