Vulnerabilities > Symantec > Norton System Works > 2006

DATE CVE VULNERABILITY TITLE RISK
2006-10-19 CVE-2006-5403 Buffer Overflow vulnerability in Symantec Automated Support Assistant ActiveX Control
Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
network
high complexity
symantec
5.1
2006-09-19 CVE-2006-4855 Resource Management Errors vulnerability in Symantec products
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
local
low complexity
symantec CWE-399
4.9
2006-01-11 CVE-2006-0166 Remote Security vulnerability in Norton SystemWorks 2006
Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other products.
network
low complexity
symantec
7.5