Symantec AntiVirus Products RAR Archive Virus Detection Bypass

André Jerleke has reported a vulnerability in various Symantec AntiVirus products, which can be exploited by malware to bypass certain scanning functionality.

Description:
André Jerleke has reported a vulnerability in various Symantec AntiVirus products, which can be exploited by malware to bypass certain scanning functionality.

The vulnerability is caused due to an error in the Symantec Antivirus component when processing encoded or archived content. This can be exploited to crash the decomposer component when parsing a specially crafted RAR file.

(...)

Solution:
Updates are available via LiveUpdate and from the Symantec Support site.
http://www.symantec.com/techsupp/

posted by Unknown @ 11:25