Because no interaction is necessary to exploit it, this is a wormable vulnerability with potentially devastating consequences to Norton and Symantec customers.

“The victim does not need to open the file or interact with it in any way. ‘Wormable' flaw that requires no user interaction by the victimĪn attacker could exploit one vulnerability in Symantec’s unpacker – which runs in the kernel – by “just emailing a file to a victim or sending them a link,” Ormandy wrote. He hammered the point home by listing “Norton Security, Norton 360, and other legacy Norton products (All Platforms), Symantec Endpoint Protection (All Versions, All Platforms), Symantec Email Security (All Platforms), Symantec Protection Engine (All Platforms), Symantec Protection for SharePoint Servers, and so on.”

It doesn’t matter if it is Symantec’s enterprise security solution or a Norton-branded version for consumers, since the same flawed core engine is used across the entire product line all “are affected by these vulnerabilities,” Ormandy wrote.

Symantec antivirus 10.0