Vulnerabilities > Symantec > Norton System Works > Low

DATE CVE VULNERABILITY TITLE RISK
2007-03-16 CVE-2007-1476 Improper Input Validation vulnerability in Symantec products
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
1.9
2006-10-19 CVE-2006-5404 Buffer Overflow vulnerability in Symantec Automated Support Assistant ActiveX Control
Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors.
network
high complexity
symantec
2.6
2005-05-02 CVE-2005-0923 Local Denial Of Service vulnerability in Symantec products
The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
local
low complexity
symantec
2.1
2005-05-02 CVE-2005-1346 Denial-Of-Service vulnerability in Web Security
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
network
high complexity
symantec
2.6