FYI…

- http://isc.sans.org/diary.php?date=2005-08-25
Updated August 26th 2005 02:45 UTC
"The Symantec AntiVirus Corporate Edition HTML client help function uses HTML help, the Windows help interface, to provide support to the client user. A non-privileged client user can manipulate the help function to access files on the system with local SYSTEM privileges…"
>>> http://securityresponse.symantec.com/avcen…2005.08.24.html

- http://secunia.com/advisories/16562/
"…Solution:
Upgrade to MR3 or later…"


:ph34r: