VULHUB ™

The Auto-Protect feature of Symantec AntiVirus for Handhelds reportedly fails to detect malicious code when it is loaded into memory, even if there are existing anti-virus definitions or heuristic detections. The discoverer of this weakness tested the issue with an 'eicar.exe' test file. After further review, this BID will be retired. The Auto-Protect feature of Symantec AntiVirus for Handhelds is meant to detect malicious code in real time as it is being saved to the device. Since malicious code would first have to be saved to the device before it could be loaded into memory, this scenario could not occur.

The Auto-Protect feature of Symantec AntiVirus for Handhelds reportedly fails to detect malicious code when it is loaded into memory, even if there are existing anti-virus definitions or heuristic detections. The discoverer of this weakness tested the issue with an 'eicar.exe' test file. After further review, this BID will be retired. The Auto-Protect feature of Symantec AntiVirus for Handhelds is meant to detect malicious code in real time as it is being saved to the device. Since malicious code would first have to be saved to the device before it could be loaded into memory, this scenario could not occur.