Browse CVEs

HIGH 7.2 CVE-2008-2289 Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain priv… Altiris Deployment Solution Mitigation only Fix from $1,9502008-05-18 HIGH 7.2 CVE-2008-2290 Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to ga… Altiris Deployment Solution Mitigation only Fix from $1,9502008-05-18 HIGH 9.3 CVE-2008-0312EPSS 6% Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norto… Norton 360 Patch available Fix from $1,9502008-04-08 MEDIUM 6.8 CVE-2008-0313 The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products… Norton 360 Patch available Fix from $1,6002008-04-08 HIGH 7.2 CVE-2008-1473 The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Sh… Altiris Deployment Solution Patch available Fix from $1,9502008-03-24 HIGH 9.3 CVE-2007-6016EPSS 50% Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Ser… Backup Exec For Windows Server Patch available Fix from $1,9502008-02-29 MEDIUM 5.1 CVE-2007-6017 The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for Windows S… Backup Exec For Windows Server Mitigation only Fix from $1,6002008-02-29 HIGH 7.1 CVE-2008-0308 Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows r… Scan Engine after 5.1.4.24 Fix from $1,9502008-02-28 MEDIUM 6.8 CVE-2008-0309 Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other ver… Scan Engine after 5.1.4.24 Fix from $1,6002008-02-28 HIGH 9.3 CVE-2008-0638EPSS 6% Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 allows re… Veritas Storage Foundation Patch available Fix from $1,9502008-02-21 MEDIUM 6.8 CVE-2008-0716 The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack. Altiris Notification Server after 6.0_sp3 Fix from $1,6002008-02-12 HIGH 10.0 CVE-2008-0640 Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management… Ghost Solutions Suite Patch available Fix from $1,9502008-02-08 HIGH 10.0 CVE-2008-0457EPSS 12% Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exe… Backupexec System Recovery Patch available Fix from $1,9502008-02-07 HIGH 7.8 CVE-2007-4347 Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.… Backupexec System Recovery Patch available Fix from $1,9502007-11-29 MEDIUM 5.0 CVE-2007-4346 The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers t… Backupexec System Recovery Patch available Fix from $1,6002007-11-29 HIGH 7.2 CVE-2007-5838 Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based aut… Altiris Deployment Solution Patch available Fix from $1,9502007-11-06 MEDIUM 6.0 CVE-2007-5829 The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security f… Norton Antivirus Mitigation only Fix from $1,6002007-11-05 MEDIUM 6.9 CVE-2007-5555 Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Aut… Altiris Deployment Solution Patch available Fix from $1,6002007-10-18 HIGH 9.3 CVE-2007-0447EPSS 6% Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple c… Antivirus Scan Engine Patch available Fix from $1,9502007-10-05 HIGH 9.3 CVE-2007-3699 The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in th… Antivirus Scan Engine Patch available Fix from $1,9502007-10-05 HIGH 10.0 CVE-2007-5126 Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: … Veritas Backup Exec No fix yet Fix from $1,9502007-09-27 HIGH 7.2 CVE-2007-5047 Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, wh… Norton Internet Security Mitigation only Fix from $1,9502007-09-24 HIGH 9.3 CVE-2007-4422 The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key (PSK) authentication is enabled, generates different response… Enterprise Firewall Mitigation only Fix from $1,9502007-08-18 HIGH 7.2 CVE-2007-4380 Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer. Altiris Deployment Solution after 6.8.282 Fix from $1,9502007-08-16 MEDIUM 6.8 CVE-2007-2955 Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Int… Norton Antivirus Mitigation only Fix from $1,6002007-08-09 MEDIUM 6.0 CVE-2007-3800 Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2… Client Security after 10.1 Fix from $1,6002007-07-16 MEDIUM 6.9 CVE-2007-3673 Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton A… Client Security Patch available Fix from $1,6002007-07-15 HIGH 7.5 CVE-2007-3509EPSS 7% Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a den… Veritas Backup Exec Patch available Fix from $1,9502007-07-12 HIGH 7.5 CVE-2007-3666 Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function. Norton Ghost Mitigation only Fix from $1,9502007-07-10 MEDIUM 5.0 CVE-2007-3665 Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecif… Norton Ghost No fix yet Fix from $1,6002007-07-10