NetSight
IP …
critical9.3

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB…

Impact

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

Affected products

VendorProductAffected versions
SymantecAntivirus Scan Engine
Versions 4.0, 4.1, 4.1.8, 4.3, 4.3.3, 4.3.7.27
SymantecBrightmail Antispam
Versions 4.0, 5.5, 6.0, 6.0.1, 6.0.2, 6.0.3
SymantecClient Security
Versions 2.0, 2.0.1_build_9.0.1.1000, 2.0.2_build_9.0.2.1000, 2.0.3_build_9.0.3.1000, 2.0.4, 2.0.5_build_1100_mp1
SymantecMail Security
Versions 4.0, 4.0.1, 4.1, 4.5, 4.5.4.743, 4.5_build_719
SymantecNorton Antivirus
All versions
Versions 9.0, 9.0.0, 9.0.0.338, 9.0.1, 9.0.1.1.1000
SymantecNorton Internet Security
Versions 3.0, 2004, 2005, 2006
SymantecNorton Personal Firewall
Versions 2006, 2006_9.1.0.33, 2006_9.1.1.7
SymantecNorton System Works
Versions 3.0, 2004, 2005, 2006
SymantecSymantec Antivirus Filtering \+For Domino
Version 3.0.12
SymantecWeb Security
Versions 2.5, 3.0, 3.0.1, 3.0.1.70, 3.0.1.76, 3.0.1_build_3.01.70
SymantecGateway Security 5000 Series
Version 3.0.1
SymantecGateway Security 5400
Version 2.0.1

Weakness classification

CWE-119

References