NetSight
IP …
high7.5

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file con…

Impact

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Affected products

VendorProductAffected versions
SymantecAntivirus Scan Engine
before 4.3.3
SymantecBrightmail Antispam
Versions 4.0, 5.5
SymantecClient Security
Versions 1.0.1_build_8.01.434, 1.0.1_build_8.01.437, 1.0.1_build_8.01.446, 1.0.1_build_8.01.457, 1.0.1_build_8.01.460, 1.0.1_build_8.01.464
SymantecGateway Security
Versions 1.0, 2.0, 2.0.1
SymantecMail Security
Versions 4.0, 4.1, 4.5_build_719
SymantecNorton Antivirus
Versions 2.18_build_83, 8.1.1.319, 8.1.1.323, 8.1.1.329, 8.1.1_build8.1.1.314a, 8.01.434
SymantecNorton Internet Security
Version 2004
SymantecNorton System Works
Version 2004
SymantecSav Filter Domino Nt Ports
Version build3.0.5
SymantecSav Filter For Domino Nt
Version 3.1.1
SymantecWeb Security
Versions 3.01.59, 3.01.60, 3.01.61, 3.01.62, 3.01.63, 3.01.67

References