eEye Digital Security has reported a vulnerability in Symantec Client Security and Symantec AntiVirus Corporate Edition, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the remote management interface when processing "COM_FORWARD_LOG" commands. This can be exploited to cause a stack-based buffer overflow via a specially crafted "COM_FORWARD_LOG" command sent to port 2967/tcp.

Successful exploitation allows execution of arbitrary code with SYSTEM privileges.

Solution
Apply patches (see patch matrix in vendor advisory).

Provided and/or discovered by
Derek Soeder, eEye Digital Security.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html

eEye Digital Security:
http://www.eeye.com/html/research/advisories/AD20060612.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers