Symantec Norton Antivirus 2011 'hpc://' Protocol Handler Security Bypass Vulnerability

Bugtraq ID:	44188
Class:	Configuration Error
CVE:	CVE-2010-3497
Remote:	No
Local:	Yes
Published:	Oct 18 2010 12:00AM
Updated:	Oct 18 2010 12:00AM
Credit:	[email protected]
Vulnerable:	Symantec Norton Antivirus 2011 0
Not Vulnerable:

Symantec Norton Antivirus 2011 'hpc://' Protocol Handler Security Bypass Vulnerability

Symantec Norton Antivirus 2011 is prone to a security-bypass vulnerability that may allow an attacker to bypass virus scans.

Successful exploits will allow attackers to bypass virus scanning, possibly allowing malicious files to escape detection.

Symantec Norton Antivirus 2011 'hpc://' Protocol Handler Security Bypass Vulnerability

Attackers can exploit this issue by sending malicious files to affected users.

Symantec Norton Antivirus 2011 'hpc://' Protocol Handler Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Norton Antivirus 2011 'hpc://' Protocol Handler Security Bypass Vulnerability

References:

• antivirus-cve (noobz Network)
  
• Norton AntiVirus Product Homepage (Symantec)
  
• Antivirus detection after malware execution ([email protected])