"Zero-day flaws found in Symantec's Endpoint Protection" - ComputerWorld Article: 7/30/14 @ 6:29am ET

"...Symantec's Endpoint Protection product has three zero-day flaws that could allow a logged-in user to move to a higher access level on a computer, according to a penetration testing and training company...."

http://www.computerworld.com/s/article/9250047/Zero_day_flaws_found_in_Symantec_s_Endpoint_Protection?taxonomyId=17

Is this being addressed? How? Is there anything we (customers) can do to mitigate these risks? Is the issue(s) in only certain versions of the product (ex: 11.x versus 12.1)?