Worm hole could possibly allow hackers to take full control of user's PC
Symantec is working hard to investigate a possible security flaw found in its antivirus software. Researchers at eEye Digital Security uncovered a vulnerability that would allow a hacker to take complete control of a host machine.
The worm is highly malicious and it doesn't even require input from the user to trigger an attack. A spokesman for eEye states, "This is definitely wormable. Once exploited, you get a command shell that gives you complete access to the machine. You can remove, edit or destroy files at will. We have confirmed that an attacker can execute code without the user clicking or opening anything."
Symantec's antivirus software has a vast install base with over 200 million computers covering both the enterprise and consumers segments. There have been no reports of someone using the exploit to plot attacks on computers connected to the Internet yet, and let's hope that it stays this way as Symantec works to resolve the issue.
Symantec has been in the news recently in regards to its lawsuit against Microsoft over storage technologies used in Windows Vista. Symantec claimed that Microsoft infringed upon technologies that Symantec had taken possession of when it acquired Veritas in 2004. Interestingly enough, Symantec is also in hot water with the IRS over the same Veritas deal.