...........................
Symantec acknowledged on Friday that its enterprise anti-virus product line
has an unpatched, "zero-day" vulnerability that can be used by attackers to
hijack systems.
"Symantec Antivirus is susceptible to a remote code-execution vulnerability.
This issue allows remote attackers to execute arbitrary code with
SYSTEM-level privileges, facilitating the complete compromise of affected
computers," the company said in an alert Friday to customers of its own
DeepSight Threat Management System.
More....
http://www.informationweek.com/industries/showArticle.jhtml?articleID=188500744