A flaw has been found in Symantec's latest antivirus software that allows hackers to exploit a PC without the user having to open anything
Flaw allows hackers to take control of a PC without the user opening any attachments or clicking on anything

Flaw found in Symantec antivirus software

System-level access for hackers with no user interaction

Written by Matt Chapman

A flaw has been found in Symantec's latest antivirus software that allows hackers to exploit a PC without the user having to open anything. 

The problem was first discovered by eEye Digital Security, which reported it as a 'high level' threat. 

"This flaw does not require any end-user interaction for exploitation and can compromise affected systems, allowing for the execution of malicious code with system-level access," said eEye in a statement.

Donal Casey, a security consultant at Morse, warned that this kind of security flaw is a serious cause for concern. 

"The fact that it allows hackers to remotely take control of a PC without the user opening any attachments or clicking on anything makes this a huge vulnerability," he said.

According to eEye, the problem affects Symantec Antivirus 10.x and Symantec Client Security 3.x.

A statement on the Symantec website described the flaw as "unverified" and the impact as "undetermined".

"Norton products do not contain the code affected by this potential vulnerability, and none of the Norton products are affected by this issue," Symantec said.

But Casey maintained that, even though the early indications are that no one has yet exploited the flaw, it is "a time bomb waiting to go off".

"Businesses must be alert and remember that their antivirus software is like any other application and must be kept up to date with the latest patches at all times," he said.

Symantec insisted that its product teams are investigating the report, and that updates would be provided for all currently supported products if necessary.

Tags:

Further reading

Security scare hits Symantec corporate tools

Hacker could gain privileged access to files   More...

Symantec caught using rootkit technology

Sony BMG saga all over again?   More...

Symantec legal action could stall Windows Vista

Security firm alleges misappropriation of intellectual property and breach of contract   More...

Symantec sues for right to delete spyware

Next up, virus writers sue to protect their creations   More...

Related articles

Highly critical flaw found in Microsoft Excel

Vulnerability could be exploited to compromise a user's system   More...

Debian flaw exposes communications breakdown

A wake up call for open source developers, Gartner warns   More...

Microsoft warns of Safari for Windows hole

Hackers could 'carpet bomb' the user's desktop   More...

Kaspersky falls through Online Scanner flaw

Security firm unaware of 'highly critical' vulnerability   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

25 Jul 2008

7.85 MBPodcast Special: Views from the Valley More...

24 Jul 2008

3.68 MBSpammer jailed, Esquire e-cover, and network passwords More...

23 Jul 2008

2.99 MBSmall time security, official 'spying' requests and a spammer jail break More...

Poll

EUROPEAN E-COMMERCE

EUROPEAN E-COMMERCE

Are you happy making an online purchase from another European country?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Credit card transaction

Credit card fraud rampant in the UK

Attempted frauds go unreported and ignored, analysts claim   More...

Intel

Intel rolls out new embedded line-up

System-on-a-chip offerings promise footprint and power saving   More...

Advertisement

Network cables

Tech giants collaborate on wireless HD

Another attempt at cable-free transmission in the home   More...

iPhone fever fills AT&T coffers

US provider cashes in on Apple smartphone   More...

Advertisement