In a recent engagement, we had the opportunity to audit the Symantec Antivirus Endpoint Protection solution, where we found a multitude of vulnerabilities. Some of these made it to CERT, while others have been scheduled for review during our upcoming AWE course at Black Hat 2014, Las Vegas. Ironically, the same software that was meant to protect the organization under review was the reason for its compromise.
more here.................http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/
more here.................http://www.offensive-security.com/vulndev/symantec-endpoint-protection-0day/