I been around the Internet for a long time including stints as Abuse Managers & Spam Fighters and have no clue.
Ahh --- I reviewed what it is and that exploit used to be called something else.
Clearly that is a bogus warning by Norton. I do not use Norton - but Robin there should be a way at their site to contact them and indicate they are throwing off False Positives.