critical10.0Public exploit code
CVE-2007-1689
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to e…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Norton Internet Security 2004 - ActiveX Control Buffer Overflow (Metasploit)2010-05-09 · remote · windows · Verified
Impact
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Norton Internet Security | Version 2004 |
| Symantec | Norton Personal Firewall | Version 2004 |
References
- NVD record
- CVE.org record
- http://osvdb.org/36164
- http://secunia.com/advisories/25290
- http://www.kb.cert.org/vuls/id/983953
- http://www.securityfocus.com/archive/1/468779/100/0/threaded
- http://www.securityfocus.com/bid/23936
- http://www.securitytracker.com/id?1018073
- http://www.symantec.com/avcenter/security/Content/2007.05.16.html
- http://www.vupen.com/english/advisories/2007/1843
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34328
- http://osvdb.org/36164
- http://secunia.com/advisories/25290
- http://www.kb.cert.org/vuls/id/983953
- http://www.securityfocus.com/archive/1/468779/100/0/threaded
- http://www.securityfocus.com/bid/23936
- http://www.securitytracker.com/id?1018073
- http://www.symantec.com/avcenter/security/Content/2007.05.16.html
- http://www.vupen.com/english/advisories/2007/1843
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34328