A vulnerability has been reported in Symantec Antivirus, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a validation error in the Intel Alert Handler service (hndlrsvc.exe) when processing a AMS request and can be exploited to crash the service via a specially crafted "CommandLine" field in a request.

The vulnerability is reported in Symantec Antivirus Corporate Edition 10.1.4.4010. Other versions may also be affected.

Solution
Restrict access to trusted hosts only (e.g. via network access control lists).

Provided and/or discovered by
Nahuel Riva, Core Security Technologies.

Original Advisory
Core Security Technologies (CORE-2010-0728):
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos

Deep Links
Links available to Secunia VIM customers