Page 1 of 1

Sysmantec Security Flaw (Nortons)

Posted: Thu Feb 10, 2005 6:13 am
by quicksilver
Symantec The name behind the familiar Norton Products has an embarassing revelation.
According to security rival ISS, which unearthed the vulnerability, the problem lies with the DEC2EXE module in the Symantec Anti-Virus Library, a part of the virus detection engine that makes it possible to detect malware inside executable files compressed using the freeware UPX (Ultimate Packer for eXecuteables) format.
What this means is that it wasnt scanning archive files correctly, (a lot of those .EXE files are compressed to save space using this sort of packing tool ) , and thats a lot of files on your drive.
Read here for more details of the vunerability

http://www.infoworld.com/article/05/02/ ... law_1.html

Luckily this is a simple fix as they have automated updating :D

Posted: Thu Feb 10, 2005 8:50 am
by Rat
Finally! An explaination as to why Norton didn't work properly. I've never been able to convinve my ol' dad that his virus problems were directly related to Norton.

Thanks Quicks. I'll be passing this on today.

Posted: Thu Feb 10, 2005 12:24 pm
by battye
Ditto, Norton has never worked for me. Not one virus ever found, now we know why..

Thanks Quick :)