Browse CVEs

HIGH 7.2 CVE-2007-5047 Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, wh… Norton Internet Security Mitigation only Fix from $1,9502007-09-24 HIGH 9.3 CVE-2007-4422 The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different response… Enterprise Firewall Mitigation only Fix from $1,9502007-08-18 MEDIUM 6.8 CVE-2007-2955 Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Int… Norton Antivirus Mitigation only Fix from $1,6002007-08-09 HIGH 7.5 CVE-2007-3666 Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function. Norton Ghost Mitigation only Fix from $1,9502007-07-10 MEDIUM 5.0 CVE-2007-3665 Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecif… Norton Ghost No fix yet Fix from $1,6002007-07-10 HIGH 8.5 CVE-2006-3456 The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and Sy… Norton Antivirus Mitigation only Fix from $1,9502007-05-11 HIGH 7.2 CVE-2007-2359 Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recover… Backupexec System Recovery Mitigation only Fix from $1,9502007-04-30 MEDIUM 6.8 CVE-2007-2360 Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, when remote backups of restore poi… Backupexec System Recovery Mitigation only Fix from $1,6002007-04-30 MEDIUM 5.1 CVE-2006-5403EPSS 6% Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and S… Automated Support Assistant Mitigation only Fix from $1,6002006-10-19 MEDIUM 5.0 CVE-2006-4562 The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hidi… Gateway Security Mitigation only Fix from $1,6002006-09-06 HIGH 7.2 CVE-2006-3784 Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by ins… Pcanywhere Mitigation only Fix from $1,9502006-07-24 HIGH 7.5 CVE-2005-3316 The installation of ON Symantec Discovery 4.5.x and Symantec Discovery 6.0 creates the (1) DiscoveryWeb and (2) DiscoveryRO database accounts with nu… Discovery Mitigation only Fix from $1,9502005-10-27 HIGH 7.2 CVE-2005-3270 Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PAT… Norton Antivirus Mitigation only Fix from $1,9502005-10-21 MEDIUM 5.1 CVE-2005-3217 Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executa… Antivirus Scan Engine No fix yet Fix from $1,6002005-10-14 HIGH 10.0 CVE-2005-2017 Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with rai… Norton Antivirus Mitigation only Fix from $1,9502005-08-30 MEDIUM 5.0 CVE-2005-0817 Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRap… Enterprise Firewall Mitigation only Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-0922 Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System W… Norton Antivirus Mitigation only Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2004-1472 Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service (devi… Firewall Vpn Appliance 100 Mitigation only Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-1910 rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString f… Security Check Virus Detection No fix yet Fix from $1,6002004-12-31 MEDIUM 5.0 CVE-2004-2147 Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail message… Norton Antivirus No fix yet Fix from $1,6002004-12-31 HIGH 10.0 CVE-2004-0487EPSS 6% A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly … Norton Antivirus No fix yet Fix from $1,9502004-08-18 MEDIUM 5.0 CVE-2004-0375EPSS 9% SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Se… Client Firewall No fix yet Fix from $1,6002004-08-18 MEDIUM 5.0 CVE-2004-0671 Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgD… Brightmail Antispam No fix yet Fix from $1,6002004-08-06 MEDIUM 5.0 CVE-2004-0683EPSS 6% Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains… Norton Antivirus Mitigation only Fix from $1,6002004-08-06 HIGH 7.2 CVE-2003-0994 The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004,… Norton Antivirus Mitigation only Fix from $1,9502004-02-03 MEDIUM 6.4 CVE-2003-1451 Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP fi… Norton Antivirus Mitigation only Fix from $1,6002003-12-31 HIGH 7.5 CVE-2003-0470EPSS 9% Buffer overflow in the "RuFSI Utility Class" ActiveX control (aka "RuFSI Registry Information Class"), as used for the Symantec Security Check servic… Security Check Mitigation only Fix from $1,9502003-08-07 HIGH 10.0 CVE-2002-2281EPSS 10% Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via a… Java No fix yet Fix from $1,9502002-12-31 HIGH 10.0 CVE-2002-2397 Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network ad… Sygate Personal Firewall Mitigation only Fix from $1,9502002-12-31 HIGH 7.8 CVE-2002-2206 The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long … Norton Antivirus Mitigation only Fix from $1,9502002-12-31