Symantec has patched the vulnerability, but many IT departments are not prepared for attacks on non-Microsoft applications, according to eEye, which discovered Big Yellow through its honey pot network.
Attacks on non-Microsoft applications should only become more common in the future because many IT professionals are unaware of their installation, said Marc Maiffret, eEye founder and CTO.
"IT urgently needs to understand that the new vector for attack will not come from Microsoft, but from the myriad applications that are scattered throughout its network," he said.
"From anti-virus to iTunes, these non-Microsoft desktop applications, many of which IT is not even aware of, will become the enterprise's biggest point of vulnerability very, very quickly."
Click here to email Online Editor Frank Washkuch Jr.