ALARM Group UPDATE

Alert Number:  TBD

Alert Date: 12/22/05

Alert Title: Vulnerabilities in Symantec AntiVirus Library Could Allow Remote Code Execution

The following advisory has been received by the New York State Office of Cyber Security and Critical Infrastructure regarding vulnerabilities identified in the Symantec Antivirus Library which could allow a remote attacker to take complete control of an affected system without any user interaction.

ITS Actions: ITS is taking no action at this time.  It is recommended that Live Update be done as soon as Symantec has a fix available.  While risk is categorized as high, there have been no publicly available exploit code nor has Symantec seen any examples of proof of concept for the vulnerability.