A flaw has been found in Symantec's latest antivirus software that allows hackers to exploit a PC without the user having to open anything
Flaw allows hackers to take control of a PC without the user opening any attachments or clicking on anything

Flaw found in Symantec antivirus software

System-level access for hackers with no user interaction

Matt Chapman

A flaw has been found in Symantec's latest antivirus software that allows hackers to exploit a PC without the user having to open anything. 

The problem was first discovered by eEye Digital Security, which reported it as a 'high level' threat. 

Advertisement

"This flaw does not require any end-user interaction for exploitation and can compromise affected systems, allowing for the execution of malicious code with system-level access," said eEye in a statement.

Donal Casey, a security consultant at Morse, warned that this kind of security flaw is a serious cause for concern. 

"The fact that it allows hackers to remotely take control of a PC without the user opening any attachments or clicking on anything makes this a huge vulnerability," he said.

According to eEye, the problem affects Symantec Antivirus 10.x and Symantec Client Security 3.x.

A statement on the Symantec website described the flaw as "unverified" and the impact as "undetermined".

"Norton products do not contain the code affected by this potential vulnerability, and none of the Norton products are affected by this issue," Symantec said.

But Casey maintained that, even though the early indications are that no one has yet exploited the flaw, it is "a time bomb waiting to go off".

"Businesses must be alert and remember that their antivirus software is like any other application and must be kept up to date with the latest patches at all times," he said.

Symantec insisted that its product teams are investigating the report, and that updates would be provided for all currently supported products if necessary.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

iPhone

Video Review: iPhone 3GS

We put Apple's latest iPhone through its paces

V3.co.uk weekly debrief, 5 Feb 2010

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Analysis and Reports

Using managed services to protect mobile data users from the latest security threats

Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations

Using a hostbased recovery system for mission-critical systems

Poll

Adobe Flash poll

Adobe Flash poll

Do you agree with Steve Jobs about Flash being buggy?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Windows 7

Microsoft denies Windows 7 battery problems

Replacement warning functioning normally, claims software giant

Safer Internet Day

Safer Internet Day highlights online threats

Annual initiative warns of phishing, ID theft and social network...

AMD Fusion

AMD details Fusion innovations at ISSCC

Forthcoming chip with four CPU and one GPU cores will...

MSI Wind U135

Review: MSI Wind U135 netbook

A decent netbook incorporating the latest Intel technology in a...

Primary Navigation