NEWS /
Worm Hits Symantec's Anti-virus Software
17 Dec, 2006, 11:00 am IST | by
Sharon Khare
|
|
eEye Digital Security, developer of network security and vulnerability management software solutions, has discovered Big Yellow, a non-Microsoft-based malware that has both worm and botnet characteristics and is currently propagating in the wild using Symantec's anti-virus software. Big Yellow exploits a vulnerability in the remote management interface for versions of Symantec AntiVirus and Symantec Client Security, which could be remotely exploited by an anonymous attacker to execute arbitrary code with SYSTEM privileges on an affected system, giving the attacker complete control. Many IT departments are not prepared for attacks on non-Microsoft-based applications and have not yet deployed the patch available for this widely deployed anti-virus software. eEye discovered this vulnerability in late May 2006 and worked with Symantec to create a patch at that time. However, many IT departments have not deployed this patch. "Given the rapid discovery of critical security vulnerabilities within desktop applications other than Microsoft, the release of malware of this magnitude targeting non-Microsoft software was only a matter of time," said Marc Maiffret, eEye's founder and CTO. "IT urgently needs to understand that the new vector for attack will not come from Microsoft, but from the myriad applications that are scattered throughout its network. From anti-virus to iTunes, these non-Microsoft desktop applications, many of which IT is not even aware of, will become the enterprise's biggest point of vulnerability very, very quickly." eEye's research team, discovered the Big Yellow malware late on December 14 on its 'honey pot' network — a network designed specifically to identify new classes of attack. Click here for more info. |
Tags: Worm , eEye Digital Security , Microsoft , Symantec , Big Yellow
You Can Stop Using Your Antivirus Now
Fake Antivirus Worm Roams Twitter
Orkut Attacked By 'Bom Sabado' Worm
New "Here You Have" Worm Delivers Unwanted Gift
Stiletto Worm Spread Via Skype IM
Wikipedia Hijacked to Spread Malware
Leaked Images, Availability, Pricing,
Specs, Pre-order
Karbonn officially launches the A9 Android smartphone
14 May, 2012, 06:14 PM IST
Supreme Court website hacked in response to TPB, Vimeo block
17 May, 2012, 04:46 PM IST
Sony Xperia P up for pre-order on Infibeam, launching on 25 May
19 May, 2012, 04:32 PM IST
Samsung Galaxy S III pops up on eBay India for Rs. 44,770
22 May, 2012, 11:19 AM IST
16 May, 2012, 11:57 AM IST
The latest "should they-shouldn't they" event with Facebook is the lift of the minimu...
Portable Wi-Fi Drives for your smartphone
Fed up of the limited storage on your mobile device? Here are some devices
Top 5 potential Gmail alternatives
Google’s Gmail service is arguably the most advanced and feature-packed...
Five ways to beat the petrol hike
Petrol prices went up by a considerable amount post Wednesday, and this...
By Karan Shah

SpaceX's Dragon capsule locks up to the ISS
26 May, 2012, 04:18 PM IST
In a moment that is nothing short of being historic, SpaceX’s Dragon capsule has, according to NASA reports ...
Microsoft VP talks about Ballmer's new tech - an 80-inch touchscreen
Cisco won't invest in their Android tablet for businesses
Yahoo! shuts down Livestand 6 months after launch
Giant radio telescope gets split location

Sony to roll-out ICS update next week,...
BlackBerry Curve 9320 announced in India...
Microsoft VP talks about Ballmer's...
Cisco won't invest in their Android...

















Mixx
Facebook
Twitter
Digg
delicious
reddit
MySpace
StumbleUpon
LinkedIn










































































_011517074205_160x90.jpg)















