----------------------------------------------------------------------

A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI
has been released. The new version includes many new and advanced
features, which makes it even easier to stay patched.

Download and test it today:
https://psi.secunia.com/

Read more about this new version:
https://psi.secunia.com/?page=changelog

----------------------------------------------------------------------

TITLE:
Symantec Products AutoFix Support Tool ActiveX Control Two
Vulnerabilities

SECUNIA ADVISORY ID:
SA29660

VERIFY ADVISORY:
http://secunia.com/advisories/29660/

CRITICAL:
Less critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Norton 360
http://secunia.com/product/16595/
Symantec Norton Internet Security 2006
http://secunia.com/product/6635/
Symantec Norton Internet Security 2007
http://secunia.com/product/14022/
Symantec Norton Internet Security 2008
http://secunia.com/product/15952/
Symantec Norton SystemWorks 2006
http://secunia.com/product/6636/
Symantec Norton SystemWorks 2007
http://secunia.com/product/16476/
Symantec Norton SystemWorks 2008
http://secunia.com/product/16477/
Symantec Norton AntiVirus 2006
http://secunia.com/product/6634/
Symantec Norton AntiVirus 2007
http://secunia.com/product/18165/
Symantec Norton AntiVirus 2008
http://secunia.com/product/18166/

DESCRIPTION:
Two vulnerabilities have been reported in various Symantec products,
which can be exploited by malicious people to compromise a user's
system.

1) A boundary error within an ActiveX control (SYMADATA.DLL) included
in the AutoFix Support Tool can be exploited to cause a stack-based
buffer overflow.

2) A design error in the same ActiveX control can be exploited to
e.g. load and execute arbitrary code from a remote share.

Successful exploitation of the vulnerabilities allows execution of
arbitrary code, but requires that the attacker e.g. conducts DNS
poisoning or cross-site scripting attacks as the ActiveX control is
site-locked and can only be scripted from a trusted domain.

The vulnerabilities affect the following products:
* Norton 360 1.0
* Norton AntiVirus 2006-2008
* Norton Internet Security2006-2008
* Norton System Works 2006-2008

SOLUTION:
Apply updates.
https://www-secure.symantec.com/techsupp/asa/install.jsp

PROVIDED AND/OR DISCOVERED BY:
The vendor credits Peter Vreugdenhill and an anonymous person, both
reported via iDefense Labs.

ORIGINAL ADVISORY:
SYM08-009:
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------