Symantec has issued a fix for a third-party vulnerability affecting several of its consumer-focused security products that could allow remote, unauthenticated attackers to execute malicious code on PCs running the software.
Cupertino, Calif.-based Symantec said the flaws affect its Automated Support Assistant, Norton AntiVirus 2006, Norton Internet Security 2006 and Norton System Works 2006 software. Symantec's 2007 Consumer, Norton 360, and corporate and enterprise products aren't affected, the company noted.
SupportSoft, which makes software that allows vendors to remotely coordinate troubleshooting and technical support, posted updates on its Web site for a remote code execution vulnerability in its SmartIssue, RemoteAssist and Probe ActiveX controls on the 5.6 and 6.x versions of its software.
When an end user's PC has a problem with a vendor's software, the vendor remotely installs SupportSoft's software on the machine to diagnose the cause of the issue. The ActiveX controls in SupportSoft's software could allow remote attackers to execute malicious code or gain unauthorized access to the user's PC, SupportSoft said.
However, a hacker would need to trick a user into visiting a malicious Web site to exploit the vulnerability, according to a Friday advisory from Danish security firm Secunia.
Secunia rated the severity of the flaw as "highly critical," or 4 on a 5-point scale, and Symantec Deepsight weighed in with an 8.3 rating out of 10.
|
Symantec's Code Red: The Law Enforcement/Anonymous E-Mail Exchange Law enforcement officials negotiated via e-mail for more than two weeks with an Anonymous group member trying to extort $50,000 from Symantec to keep stolen product code off the Internet. |
|
How To Sell IT Security Services To Your Customers Cyberattacks can cost a business thousands, even millions, of dollars, and can deal a death blow to some. Here's how IT solution providers can help guard against malicious attacks. |
|
Cybersecurity Experts: What They Know Could Scare You A recent report based on interviews with security experts in government, business and academia finds more than half in agreement that a worldwide arms race is taking place in cyberspace. |
 More
Slide Shows |
- Insider Threats: The Next Frontier for Security Resellers and SMBs
- Complete Security and Your Bottom Line: Sophos, Value and the Channel
- Tough Threats, Tougher Security: How You Can Leverage New Solutions To Combat A “Targeted Attack” Landscape
- Dark Clouds Ahead: Why the Mid-Market Needs To Ramp Up Cloud Security and How You Can Help Them Get There
