Secunia

Some vulnerabilities have been reported in Symantec Client Security and Symantec AntiVirus Corporate Edition, which can be exploited by malicious, local users to cause a DoS (Denial of Service) or gain escalated privileges.

1) A format string error within the handling of "Tamper Protection" and "Virus Alert Notification" messages can be exploited to execute arbitrary code with escalated privileges by replacing the message with a specially crafted format string.

2) Another format string error exists in the alert notification process when displaying a notification message upon detection of a malicious file. This can be exploited to crash the Real Time Virus Scan service by replacing the message with a specially crafted format string.

Solution
Apply patches (see patch matrix in vendor advisory).

Provided and/or discovered by
1) Deral Heiland, Layered Defense
2) Reported by the vendor

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2006.09.13.html

Layered Defense:
http://layereddefense.com/SAV13SEPT.html

Deep Links
Links available in Customer Area