Page 2 of 20 results (0.003 seconds)

CVSS: 5.5EPSS: 0%CPEs: 101EXPL: 2

CVE-2006-4855 – Symantec (Multiple Products) - 'SymEvent' Driver Local Denial of Service

https://notcve.org/view.php?id=CVE-2006-4855

19 Sep 2006 — The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data. El driver \Device\SymEvent ... • https://www.exploit-db.com/exploits/28588 • CWE-399: Resource Management Errors •

CVSS: 7.8EPSS: 0%CPEs: 40EXPL: 0

CVE-2006-4802

https://notcve.org/view.php?id=CVE-2006-4802

14 Sep 2006 — Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor. Vulnerabilidad de formato de cadena en el servicio Real Time Virus Scan de Symantec AntiVirus Corporate Edition 8.1 a la 10.0, y Client Security... • http://secunia.com/advisories/21884 •

CVSS: 7.8EPSS: 0%CPEs: 15EXPL: 0

CVE-2006-3454

https://notcve.org/view.php?id=CVE-2006-3454

14 Sep 2006 — Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages. Múltiples vulnerabilidades de cadenas de formato en Symantec AntiVirus Corporate Edition 8.1 hasta 10.0, y Client Security 1.x hasta 3.0, permiten a usuarios locales ejecutar código de su elección mediante cadenas de formato en (1) Protección de Alter... • http://layereddefense.com/SAV13SEPT.html •

CVSS: 7.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2006-1836

https://notcve.org/view.php?id=CVE-2006-1836

19 Apr 2006 — Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program. • http://secunia.com/advisories/19682 •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2005-2766

https://notcve.org/view.php?id=CVE-2005-2766

02 Sep 2005 — Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal LiveUpdate server. • http://marc.info/?l=bugtraq&m=112552401413998&w=2 •

CVSS: 7.5EPSS: 2%CPEs: 6EXPL: 0

CVE-2005-0922

https://notcve.org/view.php?id=CVE-2005-0922

29 Mar 2005 — Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type. • http://secunia.com/advisories/14741 •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2005-0923

https://notcve.org/view.php?id=CVE-2005-0923

29 Mar 2005 — The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share. • http://secunia.com/advisories/14741 •

CVSS: 8.8EPSS: 10%CPEs: 49EXPL: 0

CVE-2005-0249

https://notcve.org/view.php?id=CVE-2005-0249

08 Feb 2005 — Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header. • http://securitytracker.com/id?1013133 •

CVSS: 7.5EPSS: 0%CPEs: 16EXPL: 0

CVE-2004-2147

https://notcve.org/view.php?id=CVE-2004-2147

31 Dec 2004 — Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body. • http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0 •

CVSS: 7.8EPSS: 0%CPEs: 23EXPL: 0

CVE-2003-0994

https://notcve.org/view.php?id=CVE-2003-0994

03 Feb 2004 — The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges. La funcionalidad gui para una sesión interactiva en ymantec LiveUpdate 1.70.x hasta la 1.90.x (usadas en Norton Internet Security 2001 hasta 2004, SystemWorks 2001 hasta 2004, y AntiVirus y Norton ... • http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html •