AV Companies Admit Huge Errors - Symantec, Norton, McAfee AV Flawed

There are holes in the libraries of anti-virus products from Symantec, and Norton which could be used to gain control of an infected machine.

Symantec has told its DeepSight Threat Management System that the library of its product "has been found prone to multiple heap overflow vulnerabilities when scanning malformed .rar files". Symantec said the flaw affects AntiVirus Corporate Editon, Brightmail Anti-Spam; Client Security; Gateway Security; Norton AntiVirus; Norton Antivirus for Macintosh; Norton AntiVirus for Microsoft Exchange; and Norton Internet Security.

Meanwhile McAfee has fessed up to having a remote exploitation of an access control vulnerability in its McAfee Security Centre.

the Inquirer