Endpoint Protection

 View Only
  • 1.  Decomposer Engine on LUA for SEP 12

    Posted Oct 06, 2016 03:47 AM

    Hi All,

     

    Since there is a fix for the decomposer vulnerability, would like to ask if we can distribute the liveupdate patch via LUA? I can't seem to find it.



  • 2.  RE: Decomposer Engine on LUA for SEP 12

    Trusted Advisor
    Posted Oct 06, 2016 04:00 AM

    Presuming that as this was a liveupdate fix that this comes under the standard JDB definitions files downloaded for the client by the LUA and is updated with liveupdate launches. 

    https://support.symantec.com/en_US/article.TECH103088.html



  • 3.  RE: Decomposer Engine on LUA for SEP 12

    Posted Oct 10, 2016 09:07 AM

    Hi gianilac213,

    Thanks for the post.  Which exact vulnerability are you inquiring about?  Is it SYM16-015?  Instructions for how to remain secure can be found in https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00

    As long as the definitions on teh clients are current, it does not matter whether they were delievered by LUA 2.x or from the internet-based LUA servers.

    Please do keep this thread up-to-date with your progress!

    With thanks and best regards,

    Mick

     

     

     

     



  • 4.  RE: Decomposer Engine on LUA for SEP 12

    Posted Oct 12, 2016 05:20 AM

    Hi gianilac213,

    Just a ping to see if you have any additional queries?  The thread is still marked "needs solution."

    With thanks and best regards,

    Mick



  • 5.  RE: Decomposer Engine on LUA for SEP 12

    Posted Oct 12, 2016 07:55 AM

    Hi gianilac213,

    Just a ping to see if you have any additional queries?  The thread is still marked "needs solution."

    With thanks and best regards,

    Mick



  • 6.  RE: Decomposer Engine on LUA for SEP 12

    Broadcom Employee
    Posted Oct 12, 2016 12:57 PM

    Hi,

    Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. 

    Here is the update for SEP:

    Untitled_10.jpg

    Check out this SEP landing page, more detail info is available there:

    https://support.symantec.com/en_US/endpoint-protection.54619.html 

    Refer this screenshot:

    Landing page.jpg