Vulnerability CVE-2005-0249


Published: 2005-02-08   Modified: 2012-02-12

Description:
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Vendor: Symantec
Product: Sav filter domino nt ports 
Version: build3.0.5;
Product: Norton antivirus 
Version:
9.0
8.1.1_build8.1.1.314a
8.1.1.329
8.1.1.323
8.1.1.319
8.01.471
8.01.464
8.01.460
8.01.457
8.01.446
8.01.437
8.01.434
2004
2.18_build_83
Product: Brightmail antispam 
Version: 5.5; 4.0;
Product: Mail security 
Version:
4.5_build_719
4.1
4.0.2
4.0
Product: Antivirus scan engine 
Version:
4.3.3
4.3
4.0
3.1.6
3.1.5
3.1.4
3.1.3
3.1.2
3.1.1
Product: Sav filter for domino nt 
Version: 3.1.1;
Product: Web security 
Version:
3.01.68
3.01.67
3.01.63
3.01.62
3.01.61
3.01.60
3.01.59
Product: Norton internet security 
Version: 3.0; 2004;
Product: Norton system works 
Version: 3.0; 2004;
Product: Gateway security 
Version:
2.0.1
2.0
1.0
Product: Client security 
Version:
1.1.1_mr5_build_8.1.1.336
1.1.1_mr4_build_8.1.1.329
1.1.1_mr3_build_8.1.1.323
1.1.1_mr2_build_8.1.1.319
1.1.1_mr1_build_8.1.1.314a
1.0.1_build_8.01.471
1.0.1_build_8.01.464
1.0.1_build_8.01.460
1.0.1_build_8.01.457
1.0.1_build_8.01.446
1.0.1_build_8.01.437
1.0.1_build_8.01.434

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial

 References:
http://www.kb.cert.org/vuls/id/107822
http://xforce.iss.net/xforce/xfdb/18869
http://xforce.iss.net/xforce/alerts/id/187
http://www.symantec.com/avcenter/security/Content/2005.02.08.html
http://securitytracker.com/id?1013133

Related CVE
CVE-2019-12750
Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege escalation vulnerability, which is a type of issue wh...
CVE-2019-12751
Symantec Messaging Gateway, prior to 10.7.1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are nor...
CVE-2019-9703
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
CVE-2019-9702
Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels.
CVE-2019-9701
DLP 15.5 MP1 and all prior versions may be susceptible to a cross-site scripting (XSS) vulnerability, a type of issue that can enable attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability m...
CVE-2018-18367
Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution ...
CVE-2018-18366
Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptibl...
CVE-2018-12244
SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input in...

Copyright 2019, cxsecurity.com

 

Back to Top