Security flaw puts Symantec AntiVirus users at risk

According to eEye Digital Security, the latest version of Symantec AntiVirus contains a security flaw that could be used to take control of the victim's PC "without any user action." eEye spokesperson Mike Puterbaugh describes the hole as "definitely wormable," i.e. malicious software could gain access to a machine, change or delete files at will, and spread itself to other machines. Symantec says they "are evaluating the issue now and, if necessary, will provide a prompt response and solution." Puterbaugh says no proof-of-concept code has been released, but warns that hackers may already know about the flaw.

Tags: antivirus, flaw, security, symantec, vulnerability, worm