Security researchers at eEye Digital Security have discovered a serious flaw in Symantec\u2019s enterprise antivirus software that could be used by hackers to create a self-replicating "worm" attack against Symantec users.Because Symantec has not yet confirmed the existence of the problem, much less patched it, eEye is offering few details on the vulnerability, which was first disclosed late Wednesday."This is definitely a wormable flaw," said Mike Puterbaugh, eEye\u2019s vice president of marketing. "It does allow you to take remote control of the system."Similar to viruses, worms are able to spread from computer to computer, and past attacks such as 2003\u2019s Blaster and Slammer worms were widespread.Symantec is evaluating eEye\u2019s claims and "if necessary, will provide a prompt response and solution," a Symantec spokesman said Thursday.EEye Chief Hacking Officer Marc Maiffret believes it will take Symantec a "month or two" to patch the problem. "The vulnerability is pretty straightforward for them to identify within their code," he said.Version 10 and greater of Symantec\u2019s enterprise antivirus software is affected by the flaw, but the company\u2019s consumer products do not have the bug, Maiffret said.This is not the first flaw to be reported in Symantec\u2019s security products, which have increasingly come under the scrutiny of hackers and security researchers over the past year. Last December, researcher Alex Wheeler discovered a flaw in Symantec\u2019s Antivirus Library that could allow remote attackers to gain control of systems that used Symantec\u2019s products.In October, a critical flaw was found in the company\u2019s Scan Engine software.- Robert McMillan, IDG News ServiceKeep checking in at our CSO Security Feed page for updated news coverage.