Security Bigwigs Patch Their Programs

May 13, 2007

Symantec, McAfee, and Computer Associates have all fixed serious flaws in their software with recent patches and updates.

Symantec, McAfee, and Computer Associates have all recently announced fixes for vulnerabilities in their products.

McAfee's advisory describes problems, which were actually patched silently in March, in a variety of products including VirusScan and the company's Internet Security Suite . Flawed ActiveX controls could be exploited by malicious Web sites to run arbitrary code.

Symantec's issues with an ActiveX control in Norton Internet Security 2006 could also lead to arbitrary code execution. They have also been fixed through updates that are available through LiveUpdate.

CA's problems , in its CA Anti-Virus for the Enterprise, CA Threat Manager, and CA Anti-Spyware, are more difficult to exploit. They require local access, meaning the attacker has to get a program on the user's system and run it first. They could lead to elevated privileges. They have also been fixed by updates through normal channels.

Copyright 2007 by Ziff Davis Media, Distributed by United Press International

Explore further: Indonesian graft busters launch anti-corruption app

add to favorites email to friend print save as pdf

Related Stories

'Bash' computer bug could hit millions (Update)

Sep 25, 2014

The US government and technology experts warned Thursday of a vulnerability in some computer-operating systems, including Apple's Mac OS, which could allow widespread and serious attacks by hackers.

Microsoft gets busy on fix for IE watering hole attack

Jan 01, 2013

(Phys.org)—Microsoft has published a security advisory about a vulnerability in Internet Explorer 6, 7, and 8. "We are only aware of a very small number of targeted attacks at this time," a Microsoft team ...

Evidence shows Syrian security got comms from West

Jul 16, 2012

(AP) — As violence began racing through Syria last year, two European contractors were putting the finishing touches on an encrypted radio system that Syrian officials intended for their security forces, ...

Recommended for you

Indonesian graft busters launch anti-corruption app

2 hours ago

Indonesia's powerful anti-graft agency said Thursday it had launched a mobile app packed with graphics and games to educate the public and officials about bribery in one of the world's most corrupt countries.

Microsoft skips Windows 9 to emphasize advances

Sep 30, 2014

The next version of Microsoft's flagship operating system will be called Windows 10, as the company skips version 9 to emphasize advances it is making toward a world centered on mobile devices and Internet ...

User comments : 0