Symantec AV may execute viruses

Thu Feb 10 18:29:51 UTC 2005

----- Original Message ----- 
From: "Jeff Wheeler" <jwheeler at usip.org>
To: "Colin Johnston" <colinj at mx5.org.uk>
Cc: <nanog at merit.edu>
Sent: Thursday, February 10, 2005 1:18 PM
Subject: Re: Symantec AV may execute viruses

>
> Also, it doesn't appear that this issue effects the Mac software (at
> least, I didn't see the Mac products in the Symantec vulnerability
> list), only Windows products.

if this is a heap overflow and if osx uses a bsd-derived libc (with phy
malloc implementation), the vulnerability would not be exploitable. this
seems like a probable explanation.

-p

---
paul galynin