Symantec releases Norton AntiVirus 10.0.2, plugs security holes
Symantec has released Norton AntiVirus 10.0.2.
The latest release contains security enhancements for the following components:
- SmallScanner
- DiskMountNotify
and includes an update to to the Auto-Protect component.
Specifically, the security update to the DiskMountNotify component includes a fix for a potential vulnerability where the software does not set its execution path environment. Hence a non-privileged user can change their execution path environment. If the user then executes the DiskMountNotify component, it will inherit the changed environment and use it to locate system commands. The DiskMountNotify is configured to run with System Administrative privileges (SUID) and is vulnerable to a potential Trojan horse attack.
The new release is available through the Symantec LiveUpdate mechanism.
Feedback? Late-breakers@macfixit.com.Resources
Installed it a few months ago and from onset
suspected it to be the cause of slowdowns, more spinning beach balls etc.
I also noticed it affected some software (Could not access PageSender's web
support page).
After installing NAV, in the past couple three months I also experienced a
couple of Kernel panics - have not had any in years, prior to these past
months.
Trying to install hte latest update via Live Update and I received error
messages about hte Scan Engine being corrupted.
I have uninstalled NAV with the provided uninstaller. I think my iMac runs
more quickly again.
What gives? Why does this need to be chewing up my CPU or is it possibly a corrupted element in the system?