Vulnerabilities > CVE-2005-0249 - Unspecified vulnerability in Symantec products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

symantec

NVD

Published: 2005-02-08

Updated: 2019-09-20

Summary

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Antivirus Scan Engine - Symantec Antivirus Scan Engine 4.0 Symantec Antivirus Scan Engine 4.1 Symantec Antivirus Scan Engine 4.1.8 Symantec Antivirus Scan Engine 4.1.9 Symantec Antivirus Scan Engine 4.3 Symantec Brightmail Antispam 4.0 Symantec Brightmail Antispam 5.5 Symantec Client Security 1.0.1_Build_8.01.434 Symantec Client Security 1.0.1_Build_8.01.437 Symantec Client Security 1.0.1_Build_8.01.446 Symantec Client Security 1.0.1_Build_8.01.457 Symantec Client Security 1.0.1_Build_8.01.460 Symantec Client Security 1.0.1_Build_8.01.464 Symantec Client Security 1.0.1_Build_8.01.471 Symantec Client Security 1.1.1_Mr1_Build_8.1.1.314A Symantec Client Security 1.1.1_Mr2_Build_8.1.1.319 Symantec Client Security 1.1.1_Mr3_Build_8.1.1.323 Symantec Client Security 1.1.1_Mr4_Build_8.1.1.329 Symantec Client Security 1.1.1_Mr5_Build_8.1.1.336 Symantec Gateway Security 1.0 Symantec Gateway Security 2.0 Symantec Gateway Security 2.0.1 Symantec Mail Security 4.0 Symantec Mail Security 4.1 Symantec Mail Security 4.5_Build_719 Symantec Norton Antivirus 2.18_Build_83 Symantec Norton Antivirus 8.1.1.319 Symantec Norton Antivirus 8.1.1.323 Symantec Norton Antivirus 8.1.1.329 Symantec Norton Antivirus 8.1.1_Build8.1.1.314A Symantec Norton Antivirus 8.01.434 Symantec Norton Antivirus 8.01.437 Symantec Norton Antivirus 8.01.446 Symantec Norton Antivirus 8.01.457 Symantec Norton Antivirus 8.01.460 Symantec Norton Antivirus 8.01.464 Symantec Norton Antivirus 8.01.471 Symantec Norton Antivirus 9.0 Symantec Norton Antivirus 2004 Symantec Norton Internet Security 2004 Symantec Norton System Works 2004 Symantec SAV Filter Domino NT Ports Build3.0.5 Symantec SAV Filter FOR Domino NT 3.1.1 Symantec WEB Security 3.01.59 Symantec WEB Security 3.01.60 Symantec WEB Security 3.01.61 Symantec WEB Security 3.01.62 Symantec WEB Security 3.01.63 Symantec WEB Security 3.01.67 Symantec WEB Security 3.01.68	54

Summary

Vulnerable Configurations

References