May 2006

ID: 00379
Ref: 371/2006
Date: 27 May 2006:23:17:51
Version: 1

---

Title: SYM06-010 - Symantec Client Security and Symantec AntiVirus Elevation of Privilege
Abstract: A stack overflow in Symantec Client Security and Symantec AntiVirus Corporate Edition could potentially allow a remote or local attacker to execute code on the affected machine.
Vendors affected: Symantec
Operating systems affected: Symantec
Applications affected: Symantec

---

Symantec was notified that Symantec Client Security and Symantec AntiVirus
Corporate Edition are susceptible to a potential stack overflow. Exploiting this
overflow successfully could potentially cause a system crash, or allow a remote
or local attacker to execute arbitrary code with System level rights on the
affected system.

Full details of the problem and mitigation advice is available from:
http://www.symantec.com/avcenter/security/Content/2006.05.25.html