12-22-2005, 09:13 AM
Quote:Remote attackers could gain control of systems protected by Symantec Corp.'s antivirus software due to a flaw in Symantec's Antivirus Library, the company confirmed today.
Independent security researcher Alex Wheeler discovered the flaw and published an advisory (download PDF) yesterday. In it, he details how the Symantec Antivirus Library can be overwhelmed by "heap overflows" while decompressing an RAR file, a commonly used file format for storing large video or audio files.
Wheeler recommends that users turn off the scanning of RAR files until Symantec fixes the code in the library.
full article: http://www.computerworld.com/securitytop...70,00.html