A Google security researcher has found high severity vulnerabilities in antivirus products from Symantec. The flaws were found by Tavis Ormandy, a researcher with Google’s Project Zero team. They highlight the poor state of software security in the antivirus world. Most of the flaws can lead to remote code execution and are wormable, meaning they can be used to create computer worms. Some products were updated automatically, but some affected products could require manual intervention. All Norton products — the consumer line — should have been updated automatically.”]

