Norton Security (Mac OS X – Symantec AV Engine) – Arbitrary File Deletion Vulnerability

Product Description:

Norton™ Internet Security for Mac protects your Mac from virus and malware via advanced scanning and detection technologies.

Vulnerability Discussion:

Symantec AV Engine (Mac endpoints only) may be susceptible to an arbitrary file deletion issue, which is a type of vulnerability that could allow an attacker to delete files on the resident system without elevated privileges.

Vendor Contact Timeline:

2019-03-17: Vendor contacted via email.
2019-04-30: Vendor confirms vulnerability.
2019-05-08: Vendor issues product update.
2019-05-28: RACK911 Labs issues advisory.

About Us:

RACK911 Labs
1110 Palms Airport Drive, Suite 110
Las Vegas, NV 89119

1-855-RACK911

Reference(s):