Vulnerabilities > Symantec
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-10-05 | CVE-2007-3699 | Remote vulnerability in Symantec AntiVirus Malformed CAB and RAR Compression The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header. | 9.3 |
| 2007-10-05 | CVE-2007-0447 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Symantec products Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives. | 9.3 |
| 2007-09-27 | CVE-2007-5126 | Unspecified vulnerability in Symantec Veritas Backup Exec 11D Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. | 10.0 |
| 2007-09-24 | CVE-2007-5047 | Improper Input Validation vulnerability in Symantec Norton Internet Security 200815.0.0.60 Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to cause a denial of service (crash) and possibly gain privileges via the NtOpenSection kernel SSDT hook. | 7.2 |
| 2007-08-18 | CVE-2007-4422 | Unspecified vulnerability in Symantec Enterprise Firewall 6 The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. | 9.3 |
| 2007-08-16 | CVE-2007-4380 | Local Privilege Escalation vulnerability in Symantec Altiris Deployment Solution Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer. | 7.2 |
| 2007-08-09 | CVE-2007-2955 | Remote Code Execution vulnerability in Symantec products Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA. network symantec | 6.8 |
| 2007-07-23 | CVE-2007-2950 | Local Privilege Escalation vulnerability in Discovery and Asset Manager Centennial Discovery 2006 Feature Pack 1, which is used by (1) Numara Asset Manager 8.0 and (2) Symantec Discovery 6.5, uses insecure permissions on certain directories, which allows local users to gain privileges. | 7.2 |
| 2007-07-16 | CVE-2007-3800 | Local Privilege Escalation vulnerability in Symantec Client Security and Norton Antivirus Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the Notification Message window is enabled, allows local users to gain privileges via crafted code. | 6.0 |
| 2007-07-15 | CVE-2007-3771 | Stack Overflow vulnerability in Symantec Client Security and Norton Antivirus Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. | 4.6 |