Security defects have been uncovered by Google’s Project Zero security team in FireEye products that could result in the compromise of complete computer systems as well as remote code execution.

Tavis Ormandy from the Google Project Zero susceptibility disclosure team said on Tuesday the defects were serious enough for FireEye to request time to fix the issue, which had the possibility to enable remote code execution to occur by means of an extensive array of products.

Derived from network monitoring, Ormandy noted that cybersecurity company FireEye’s main products are in a blog post, and so essential security weaknesses could make a mess of business networks.

FireEye products will generally have network wiretap privileges and frequently take the kind of passive tracking apparatus — access to e-mail systems, downloads, attachments and so forth are needed to be able to maintain a corporate network safe.

Dubbed “666” — as the issue occurs to be the 666th Job Zero security advisory — the defect affects the NX, FX, AX and EX-HUSBAND product show.

The essential flaw may be used for privilege escalation, possibly resulting in system takeovers, rooting, network surveillance and data theft.

“An attacker can send an e-mail to a user or make them click a link, and fully undermine one of the very privileged machines on the network,” Omandy says.

FireEye supplied a patch for the defect within two days and was fast off the mark. In a statement (.PDF), the cyberforensics company said a decrease procedure was quickly deployed through the organization ‘s hourly Security Content automatic updater, as well as a long-term fix was released on Monday.

Customers should upgrade their systems as soon as possible to remain safe from cyberattacks leveraging the bug that is crucial.