Vulnerabilities > CVE-2007-3771 - Stack Overflow vulnerability in Symantec Client Security and Norton Antivirus

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

local

low complexity

symantec

NVD

Published: 2007-07-15

Updated: 2017-07-29

Summary

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Client Security 2.0 Symantec Client Security 3.0 Symantec Client Security 3.0.1.1000 Symantec Client Security 3.0.1.1007 Symantec Client Security 3.0.1.1009 Symantec Client Security 3.0.2 Symantec Client Security 3.0.2.2000 Symantec Client Security 3.0.2.2001 Symantec Client Security 3.0.2.2002 Symantec Client Security 3.0.2.2011 Symantec Client Security 3.0.2.2021 Symantec Norton Antivirus 9.0 Symantec Norton Antivirus 9.0.0.338 Symantec Norton Antivirus 9.0.1 Symantec Norton Antivirus 9.0.1.1.1000 Symantec Norton Antivirus 9.0.1.1000 Symantec Norton Antivirus 9.0.2 Symantec Norton Antivirus 9.0.2.1000 Symantec Norton Antivirus 9.0.3.1000 Symantec Norton Antivirus 9.0.4 Symantec Norton Antivirus 9.0.5 Symantec Norton Antivirus 9.0.5.1100 Symantec Norton Antivirus 10.0 Symantec Norton Antivirus 10.0.1.1000 Symantec Norton Antivirus 10.0.1.1007 Symantec Norton Antivirus 10.0.2.2000 Symantec Norton Antivirus 10.0.2.2001 Symantec Norton Antivirus 10.0.2.2002 Symantec Norton Antivirus 10.0.2.2010 Symantec Norton Antivirus 10.0.2.2011 Symantec Norton Antivirus 10.0.2.2020 Symantec Norton Antivirus 10.0.2.2021	32

Summary

Vulnerable Configurations

References