Privilege Escalation in Symantec AntiVirus and Norton Security for Macintosh

CVE-2007-5829

Summary

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, along with Norton AntiVirus for Macintosh 10.0 and 10.1 and Norton Internet Security for Macintosh 3.x, has a vulnerability that arises from its use of a directory with weak permissions, specifically group writable settings. This flaw permits local administrators to replace sensitive files, allowing them to execute arbitrary code with root privileges when a disk is mounted with the 'Show Progress During Mount Scans' option active. This scenario poses significant security risks, especially in environments where physical access to machines is possible.

References