el mailman

http://theinquirer.net/?article=284965

THERE ARE holes in the libraries of anti-virus products from Symantec, and Norton which could be used to gain control of an infected machine.

Symantec has told its DeepSight Threat Management System that the library of its product "has been found prone to multiple heap overflow vulnerabilities when scanning malformed .rar files".

AntiVirus Library’s job is to detect malware by looking at a number of files in different formats.

If the virus writer knows what they are doing, they can remotely control the library to gain complete control over the affected system.

Symantec said the flaw affects AntiVirus Corporate Editon, Brightmail Anti-Spam; Client Security; Gateway Security; Norton AntiVirus; Norton Antivirus for Macintosh; Norton AntiVirus for Microsoft Exchange; and Norton Internet Security.

Symantec has not released a patch, but said users can reduce the threat by disabling the scanning of .rar-compressed files and not opening e-mail attachments.

Meanwhile McAfee has fessed up to having a remote exploitation of an access control vulnerability in its McAfee Security Centre.

This allows attackers to create or overwrite arbitrary files thanks to a registered ActiveX control failing to restrict which domains may load the control for execution. McAfee said the vulnerability has been fixed via its automatic update service.

More at this security place(http://searchsecurity.techtarget.com...153709,00.html)

__________________
boredom
suicide shot overclock with mobile 3400+

"If you understand it right away - you're not learning anything new, you're just reading what you know. Reading what doesn't seem clear right away - means it's new information to you and you need to read it until you get it. That's when you've learned something new."
-my mother

Warmaster

You buy the product,take a huge resource hit and they still cant get it right.Utter BS

SoaDMTGguy

And that, my friends, is why you should all be using AVG!

__________________

thenut

or nod32

__________________

Pinhead-227

Avast!

Melcar

I'm using AVG now and don't plan to go back to McAfee or Norton any time soon (most likely never). What really pissed me off was that even when you buy the thing, you only get a year worth of updates. On top of that, I had to run at least 2 different antivirus programs to catch everything. AVG all the way man.