Title: Symantec AntiVirus For Handhelds Auto-Protect Scanning Weakness
Severity: MODERATE
Description:
Symantec AntiVirus for Handhelds is an anti-virus program for PocketPC and Palm compatible PDAs.
The Auto-Protect feature of Symantec AntiVirus for Handhelds reportedly fails to detect malicious code when it is loaded into memory, even if there are existing anti-virus definitions or heuristic detections. The discoverer of this weakness tested the issue with an 'eicar.exe' test file. The Auto-Protect feature may fail to adequately protect handheld systems as a result.
After further review, this BID will be retired. The Auto-Protect feature of Symantec AntiVirus for Handhelds is meant to detect malicious code in real time as it is being saved to the device. Since malicious code would first have to be saved to the device before it could be loaded into memory, this scenario could not occur.
Affected Products:
- Symantec AntiVirus for Handhelds 3.0.0.0.194
References:
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
