Secunia

A vulnerability has been reported in various Symantec products, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to a design error within the NAVOpts.dll ActiveX control when loaded in a standard browser window. This can be exploited to e.g. access other Symantec ActiveX controls that are not marked as safe for scripting.

The vulnerability affects the following products:
* Norton AntiVirus 2005 and 2006
* Norton Internet Security 2005 and 2006
* Norton System Works 2005 and 2006

Solution
Apply latest updates via LiveUpdate.
Further details available in Customer Area

Provided and/or discovered by
Discovered by Peter Vreugdenhil and reported via iDefense Labs.

Original Advisory
Symantec:
http://www.symantec.com/avcenter/security/Content/2007.05.09.html

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=529

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area