"The bug, which was made public Tuesday by researcher Alex Wheeler, is in how Symantec's AntiVirus Library, part of virtually all the Cupertino, Calif.-based security giant's programs, handles RAR compressed files. RAR files are created by the WinRAR compression utility, developed and sold by RarLab," reports TechWeb News.
"In an advisory released Wednesday, Symantec listed 48 enterprise titles and 15 consumer products that used the flawed Library. On the consumer side, the 2006 versions of Norton AntiVirus, Internet Security, SystemWorks, and Personal Firewall are open to attack. Corporate titles such as Norton AntiVirus for Microsoft Exchange, BrightMail Antispam, and AntiVirus for Handhelds are also on the list."
There aren't any patches but Symantec is sending out a "heuristic detection" system via Live Update. This is not a problem at the moment. as there are no exploits known to exploit the security hole.
