US-CERT Issues Alert Over Severe Security Bugs In Symantec, Norton Products
Newly discovered--and now patched--flaws in popular security software raises alarm.
![](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/bltc94608acf452fd67/655cf371ab171e040a838b2a/329050_DR23_Graphics_Website_V5_Default_Image_v1.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
US-CERT this week warned users to immediately patch their Symantec and Norton antivirus software in the wake of revelations of severe vulnerabilities that could allow an attacker to remotely control victim machines.
The vulnerabilities, which were uncovered by Google's Tavis Ormandy, affect some 24 products in Windows, OS X, and Linux environments.
"A remote, unauthenticated attacker may be able to run arbitrary code at root or SYSTEM privileges by taking advantage of these vulnerabilities. Some of the vulnerabilities require no user interaction and are network-aware, which could result in a wormable-event," US-CERT said in its advisory.
Symantec has issued patches and hotfixes to the security bugs, and US-CERT is calling for organizations to patch "immediately."
See the US-CERT advisory here, and the Symantec advisory and security update here.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024