Original URL: http://www.channelregister.co.uk/2008/02/29/symantec_trend_security_bugs/
Security products from both Trend Micro and Symantec - two of the big three anti-virus players - have become the subject of serious security vulnerabilities.
Errors (http://secunia.com/advisories/29140) in Symantec's Decomposer engine create a denial of service or system compromise risk for several enterprise security products (such as Mail Security for Microsoft Exchange and AntiVirus for Network Attached Storage).
Vulnerabilities triggered when processing malformed RAR archive files might be used to inject malware onto vulnerable systems (in the most serious case (http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=667)) or crash servers.
Security researchers at iDefense discovered the flaws. Symantec published an advisory (http://www.symantec.com/avcenter/security/Content/2008.02.27.html) on Tuesday explaining how sys admins can update their software.
Decomposer components decompress or unpack files. The components have been something of a weak spot in Symantec products of late. As well as being the root cause of the latest security bugs, troubles in updating Decomposer files were behind an error-generating bug that caused all sorts of grief for corporate sys admins earlier this month.
Separately, independent security researchers have discovered buffer overflow bugs in OfficeScan and Policy Server software packages from Trend Micro. Sys admins are advised (http://secunia.com/advisories/29124) to restrict network access to the services pending the availability of patches. ®
Attackers hose down Microsoft's Jet DB Engine (26 March 2008)
http://www.channelregister.co.uk/2008/03/26/jet_database_engine_security_flaws/
Symantec Endpoint Security throws out error bugs (20 February 2008)
http://www.channelregister.co.uk/2008/02/20/symantec_enpoint_security_error_bug/
Update glitch derails Kaspersky (14 December 2007)
http://www.channelregister.co.uk/2007/12/14/kaspersky_update_glitch/
Sophos bug highlights wider anti-virus flaws (29 July 2005)
http://www.theregister.co.uk/2005/07/29/sophos_buffer_overflow_bug/
Security products 'riddled' with bugs (20 June 2005)
http://www.channelregister.co.uk/2005/06/20/yankee_security_product_risks/
PC-cillin killed my PC (25 April 2005)
http://www.channelregister.co.uk/2005/04/25/pc-cillin_duff_update/
Anti-virus vulnerabilities strike again (18 March 2005)
http://www.channelregister.co.uk/2005/03/18/mcafee_vuln/
© Copyright 2008