Symantec Norton AntiVirus contains a flaw that may allow a remote attacker to bypass antivirus policies. The issue is triggered when inserting NULL characters into the MIME type before the virus type is defined, which would remain undetected by the incoming email protection feature. It is possible that the flaw may allow a remote attacker to execute arbitrary code, resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Public
Disclosure:
Vendor Disputed
OSVDB:
Security Software
Solution
Currently, there are no known upgrades, patches, or workarounds available to correct this issue.
edvicesecurity.com -
Edvice Security Services
