Lucene search

K
cveMitreCVE-2002-1776
HistoryJun 21, 2005 - 4:00 a.m.

CVE-2002-1776

2005-06-2104:00:00
mitre
web.nvd.nist.gov
26
symantec
norton antivirus
2002
remote attackers
virus protection
bypass
word macro virus
.nch
.dbx
microsoft office document

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

70.8%

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed

Affected configurations

Nvd
Node
symantecnorton_antivirusMatch2002
VendorProductVersionCPE
symantecnorton_antivirus2002cpe:2.3:a:symantec:norton_antivirus:2002:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7

Confidence

Low

EPSS

0.003

Percentile

70.8%

Related for CVE-2002-1776