Liveupdate

DATE	CVE	VULNERABILITY TITLE	RISK
2001-10-05	CVE-2001-1125	Download of Code Without Integrity Check vulnerability in Symantec Liveupdate 1.0/1.4/1.5 Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site. network low complexity symantec CWE-494 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.