Symantec Core antivirus engine has high-risk Vulnerabilities
Security Vulnerabilities in anti-virus software are nothing new. Symantec is the latest anti-virus software that exposes high-risk vulnerabilities. Its core anti-virus engine will buffer overflow when parsing executable files packaged in earlier versions of aspack. Symantec's core Antivirus Engine is widely used by Symantec and Norton products. The vulnerability, numbered CVE-2016-2208, is a remote code execution vulnerability that can be exploited by sending an email or link containing a file to the victim. On Linux, Mac, or UNIX platforms, it causes remote heap overflow. On Windows, it causes kernel memory corruption because the Scan Engine of anti-virus software is loaded into the kernel, it becomes a remote ring0 Memory Corruption Vulnerability.
This article permanently updates the link address: