The problem concerns the use of Flash files on the console. Adobe patched the Flash flaw on 12 July, but the Opera browser used by the Wii is still vulnerable.
"The most interesting thing is that it is a cross-platform vulnerability," said Liam OMurchu from Symantec's Security Response team.
"Due to the fact that Flash can run in different browsers and on different platforms, the discovery of this one vulnerability could leave all Flash-enabled operating systems and devices open to the attack, including some advanced smartphones.
"The vulnerability has already been tested on Windows, Apple Mac, and some Linux distributions, but many other devices that are Flash-enabled could be affected by the problem too."
The malware to exploit the flaw in a Windows environment has been posted on a popular exploit website and uses specially crafted .FLV Flash files.
These can be uploaded to popular video sharing sites and the Symantec team has warned such sites to begin scanning for corrupted files.
A video of the flaw in action has been posted on YouTube.
In fear of future shortage - or in preparation for its own electric car project?
New Spectre microcode patches released by Intel to fix security flaws in Skylake, Kaby Lake and Coffee Lake CPUs
But if you're running anything older you'll have to wait
Powered by servers based on Qualcomm's scalable 48-core Centriq 2400 10nm CPUs
Malware has been in circulation for more than a year