Secunia

Bipin Gautam has reported a security issue in Norton AntiVirus 2002, which may result in malware being executed undetected.

An error in the Auto-Protect engine reportedly allows malware to be executed undetected on a system under some circumstances. This can be exploited by placing a malicious file in a nested sub-folder.

A bug was also reported, which may crash the front-end ("NAVW32.exe") when performing a manual scan of a file or folder with a name containing an ASCII control character. This doesn't affect the Auto-Protect engine.

NOTE: The vendor has reportedly not been able to confirm the issues in the reported version or any other supported and up-to-date versions.

Solution
Grant only trusted users access to affected systems.

Provided and/or discovered by
Bipin Gautam

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area