Secunia

A vulnerability has been reported in some Symantec products, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an input validation error in the SYMLTCOM.dll ActiveX control, which can be exploited to cause e.g. a stack-based buffer overflow when a user visits a specially crafted web page.

Successful exploitation allows execution of arbitrary code, but is limited to a certain unspecified domain.

The vulnerability is reported in the following products and versions:
* N360 1.0 and 2.0
* Norton Internet Security 2006 through 2008
* Norton AntiVirus 2006 through 2008
* Norton SystemWorks 2006 through 2008
* Norton Confidential 2006 through 2008
* Symantec Client Security 3.0.x and 3.1.x

Solution
N360 1.0 and 2.0, Norton Internet Security, Norton AntiVirus, Norton SystemWorks, Norton Confidential:
Further details available in Customer Area

Provided and/or discovered by
The vendor credits FrSIRT.

Original Advisory
Symantec SYM10-003:
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01

Deep Links
Links available in Customer Area