Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2006-04-19	CVE-2006-1836	Local Privilege Escalation vulnerability in Symantec LiveUpdate for Macintosh Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program. local low complexity symantec	6.8
2005-05-02	CVE-2005-0922	Remote Denial Of Service vulnerability in Symantec products Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type. network low complexity symantec	5.0
2004-08-18	CVE-2004-0375	Remote Denial Of Service vulnerability in Symantec Client Firewall Products SYMNDIS.SYS Driver SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero. network low complexity symantec	5.0
2003-10-27	CVE-2003-1149	Cross-Site Scripting vulnerability in Symantec Norton Internet Security 20036.0.4.34 Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page. network symantec	4.3
2002-12-31	CVE-2002-1695	Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running. network low complexity microsoft symantec	5.0