Symantec Endpoint Protection Tamper-Protection Bypass

This strike exploits a tamper-protection bypass vulnerability in Symantec Endpoint Protection. The vulnerability is due to lack of User Interface Privilege Isolation for source validation of Windows API messages. By exploiting this vulnerability, an attacker could alter Symantec Endpoint Protection user interface that could result in denying end user ability to use the antivirus or displaying to the end user erroneous information about antivirus activity.