Some of Symantec’s flaws are basic, and should have been caught by the company during code development and review. But others are far more serious, and would allow an attacker to gain remote-code execution on a machine, a hacker’s dream. One particularly devastating flaw could be exploited with a worm. Just by “emailing a file to a victim or sending them a link to an exploit … the victim does not need to open the file or interact with it in anyway,
Ormandy has previously discovered serious flaws in products belonging to a string of high-profile security shops like FireEye, Kaspersky Lab, McAfee, Sophos, and Trend Micro.
https://www.wired.com/2016/06/symantecs-woes-expose-antivirus-software-security-gaps/
Ormandy has previously discovered serious flaws in products belonging to a string of high-profile security shops like FireEye, Kaspersky Lab, McAfee, Sophos, and Trend Micro.
https://www.wired.com/2016/06/symantecs-woes-expose-antivirus-software-security-gaps/
