NetSight
IP …
critical9.3

CVE-2007-3699

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZ…

Impact

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

Affected products

VendorProductAffected versions
SymantecAntivirus Scan Engine
Versions 4.0, 4.1, 4.1.8, 4.3, 4.3.3, 4.3.7.27
SymantecBrightmail Antispam
Versions 4.0, 5.5, 6.0, 6.0.1, 6.0.2, 6.0.3
SymantecClient Security
Versions 2.0, 2.0.1_build_9.0.1.1000, 2.0.2_build_9.0.2.1000, 2.0.3_build_9.0.3.1000, 2.0.4, 2.0.5_build_1100_mp1
SymantecMail Security
Versions 4.0, 4.0.1, 4.1, 4.5, 4.5.4.743, 4.5_build_719
SymantecNorton Antivirus
All versions
Versions 9.0, 9.0.0, 9.0.0.338, 9.0.1, 9.0.1.1.1000
SymantecNorton Internet Security
Versions 3.0, 2004, 2005, 2006
SymantecNorton Personal Firewall
Versions 2006, 2006_9.1.0.33, 2006_9.1.1.7
SymantecNorton System Works
Versions 3.0, 2004, 2005, 2006
SymantecSymantec Antivirus Filtering \+For Domino
Version 3.0.12
SymantecWeb Security
Versions 2.5, 3.0, 3.0.1, 3.0.1.70, 3.0.1.76, 3.0.1_build_3.01.70
SymantecGateway Security 5000 Series
Version 3.0.1
SymantecGateway Security 5400
Version 2.0.1

References