More holes found in Symantec security software

The four vulnerabilities affect Norton Internet Security 2004, Norton Internet Security 2004 Professional, and Norton Personal Firewall 2004.

Security firm eEye Digital Security spotted the flaws but is refusing to issue too many details until Symantec gets around to issuing patches.

Three faults were remotely-exploitable vulnerabilities that allowed attackers to compromise default installations of the affected software and gain access of the host machine.

The fourth is a remotely-exploitable vulnerability that allows an anonymous attacker to execute a severe denial-of-service attack against systems running default installations of the affected software.

Symantec has been slow in patching a vulnerability eEye told it to fix 44 days ago. µ