Vulnerabilities > CVE-2007-3699 - Remote vulnerability in Symantec AntiVirus Malformed CAB and RAR Compression

CVSS 9.3 - CRITICAL

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

symantec

critical

nessus

NVD

Published: 2007-10-05

Updated: 2012-10-31

Summary

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Antivirus Scan Engine 4.0 Symantec Antivirus Scan Engine 4.1 Symantec Antivirus Scan Engine 4.1.8 Symantec Antivirus Scan Engine 4.3 Symantec Antivirus Scan Engine 4.3.3 Symantec Antivirus Scan Engine 4.3.7.27 Symantec Antivirus Scan Engine 4.3.8.29 Symantec Antivirus Scan Engine 4.3.12 Symantec Antivirus Scan Engine 5.0 Symantec Antivirus Scan Engine 5.0.1 Symantec Brightmail Antispam 4.0 Symantec Brightmail Antispam 5.5 Symantec Brightmail Antispam 6.0 Symantec Brightmail Antispam 6.0.1 Symantec Brightmail Antispam 6.0.2 Symantec Brightmail Antispam 6.0.3 Symantec Brightmail Antispam 6.0.4 Symantec Client Security 2.0 Symantec Client Security 2.0.1_Build_9.0.1.1000 Symantec Client Security 2.0.2_Build_9.0.2.1000 Symantec Client Security 2.0.3_Build_9.0.3.1000 Symantec Client Security 2.0.4 Symantec Client Security 2.0.5_Build_1100_Mp1 Symantec Client Security 2.0.6 Symantec Client Security 3.0 Symantec Client Security 3.0.0.359 Symantec Client Security 3.0.1.1000 Symantec Client Security 3.0.1.1001 Symantec Client Security 3.0.1.1007 Symantec Client Security 3.0.1.1008 Symantec Client Security 3.0.2.2000 Symantec Client Security 3.0.2.2001 Symantec Client Security 3.0.2.2002 Symantec Client Security 3.0.2.2010 Symantec Client Security 3.0.2.2011 Symantec Client Security 3.0.2.2020 Symantec Client Security 3.0.2.2021 Symantec Client Security 3.1 Symantec Client Security 3.1.394 Symantec Client Security 3.1.396 Symantec Client Security 3.1.400 Symantec Client Security 3.1.401 Symantec Mail Security 4.0 Symantec Mail Security 4.0.1 Symantec Mail Security 4.1 Symantec Mail Security 4.5 Symantec Mail Security 4.5.4.743 Symantec Mail Security 4.5_Build_719 Symantec Mail Security 4.5_Build_736 Symantec Mail Security 4.5_Build_741 Symantec Mail Security 4.6.1.107 Symantec Mail Security 4.6.3 Symantec Mail Security 4.6_Build_97 Symantec Mail Security 5.0 Symantec Mail Security 5.0.0.204 Symantec Mail Security 5.0.1 Symantec Mail Security 5.1.0 Symantec Mail Security 6.0.0 Symantec Norton Antivirus * Symantec Norton Antivirus 9.0 Symantec Norton Antivirus 9.0.0 Symantec Norton Antivirus 9.0.0.338 Symantec Norton Antivirus 9.0.1 Symantec Norton Antivirus 9.0.1.1.1000 Symantec Norton Antivirus 9.0.2 Symantec Norton Antivirus 9.0.2.1000 Symantec Norton Antivirus 9.0.3 Symantec Norton Antivirus 9.0.3.1000 Symantec Norton Antivirus 9.0.4 Symantec Norton Antivirus 9.0.5 Symantec Norton Antivirus 9.0.5.1100 Symantec Norton Antivirus 9.0.6.1000 Symantec Norton Antivirus 10.0 Symantec Norton Antivirus 10.0.0 Symantec Norton Antivirus 10.0.0.359 Symantec Norton Antivirus 10.0.1 Symantec Norton Antivirus 10.0.1.1000 Symantec Norton Antivirus 10.0.1.1007 Symantec Norton Antivirus 10.0.1.1008 Symantec Norton Antivirus 10.0.2.2000 Symantec Norton Antivirus 10.0.2.2001 Symantec Norton Antivirus 10.0.2.2002 Symantec Norton Antivirus 10.0.2.2010 Symantec Norton Antivirus 10.0.2.2011 Symantec Norton Antivirus 10.0.2.2020 Symantec Norton Antivirus 10.0.2.2021 Symantec Norton Antivirus 10.1 Symantec Norton Antivirus 10.1.4 Symantec Norton Antivirus 10.1.4.4010 Symantec Norton Antivirus 10.1.394 Symantec Norton Antivirus 10.1.396 Symantec Norton Antivirus 10.1.400 Symantec Norton Antivirus 10.1.401 Symantec Norton Antivirus 10.9.1 Symantec Norton Antivirus 2004 Symantec Norton Antivirus 2005 Symantec Norton Antivirus 2006 Symantec Norton Internet Security 3.0 Symantec Norton Internet Security 2004 Symantec Norton Internet Security 2005 Symantec Norton Internet Security 2006 Symantec Norton Personal Firewall 2006 Symantec Norton Personal Firewall 2006_9.1.0.33 Symantec Norton Personal Firewall 2006_9.1.1.7 Symantec Norton System Works 3.0 Symantec Norton System Works 2004 Symantec Norton System Works 2005 Symantec Norton System Works 2006 Symantec Symantec Antivirus Filtering +For Domino 3.0.12 Symantec WEB Security 2.5 Symantec WEB Security 3.0 Symantec WEB Security 3.0.1 Symantec WEB Security 3.0.1.70 Symantec WEB Security 3.0.1.76 Symantec WEB Security 3.0.1_Build_3.01.70 Symantec WEB Security 3.0.1_Build_3.01.72 Symantec WEB Security 3.0.1_Build_3.01.74 Symantec WEB Security 3.01.59 Symantec WEB Security 3.01.60 Symantec WEB Security 3.01.61 Symantec WEB Security 3.01.62 Symantec WEB Security 3.01.63 Symantec WEB Security 3.01.67 Symantec WEB Security 3.01.68 Symantec WEB Security 5.0	165
Hardware	Symantec Symantec Gateway Security 5000 Series 3.0.1 Symantec Gateway Security 5400 2.0.1 Symantec Mail Security 8820 Appliance *	3

Nessus

NASL family	Windows
NASL id	SYMANTEC_SMS_SYM_07-019.NASL
description	The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code execution. (CVE-2007-0447) - It is is possible to trigger a denial of service condition when the scanning engine processes a RAR file with a specially crafted header. (CVE-2007-3699)
last seen	2020-06-01
modified	2020-06-02
plugin id	67004
published	2013-06-27
reporter	This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/67004
title	Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities

NASL family	Windows
NASL id	SYMANTEC_DECOMPOSER_SYM07-019.NASL
description	The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code execution. (CVE-2007-0447) - It is is possible to trigger a denial of service condition when the scanning engine processes a RAR file with a specially crafted header. (CVE-2007-3699)
last seen	2020-06-01
modified	2020-06-02
plugin id	67002
published	2013-06-27
reporter	This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/67002
title	Symantec Antivirus Scan Engine RAR and CAB Parsing Multiple Vulnerabilities

NASL family	Windows
NASL id	SYMANTEC_SMS_SMTP_SYM_07-019.NASL
description	The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities : - A heap overflow vulnerability exists that can be triggered when the scanning engine processes a specially crafted CAB file, possibly leading to arbitrary code execution. (CVE-2007-0447) - It is is possible to trigger a denial of service condition when the scanning engine processes a RAR file with a specially crafted header. (CVE-2007-3699)
last seen	2020-06-01
modified	2020-06-02
plugin id	67003
published	2013-06-27
reporter	This script is Copyright (C) 2013-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/67003
title	Symantec Mail Security for SMTP RAR and CAB Parsing Multiple Vulnerabilities

Seebug

bulletinFamily	exploit
description	BUGTRAQ ID: 24282 CVE(CAN) ID: CVE-2007-3699,CVE-2007-0447 Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus没有正确地处理RAR文件头中的伪造PACK_SIZE字段；如果将该字段设置为特定值的话，则扫描器在处理该文件时就可能触发死循环，导致拒绝服务。 Symantec AntiVirus引擎在扫描多个恶意格式的CAB文档时还存在堆溢出漏洞，如果用户受骗打开了特制的CAB文件的话就可能导致执行任意指令。 Symantec AntiVirus Scan Engine <= 4.3.12 Symantec AntiVirus Scan Engine <= 4.1.8 Symantec Scan Engine <= 5.0.1 Symantec -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： <a href="http://www.symantec.com/techsupp/" target="_blank">http://www.symantec.com/techsupp/</a>
id	SSV:2006
last seen	2017-11-19
modified	2007-07-17
published	2007-07-17
reporter	Root
title	Symantec AntiVirus畸形CAB和RAR文件解压堆溢出及拒绝服务漏洞

Summary

Vulnerable Configurations

Nessus

Seebug

References