Lucene search

MitreCVE-2005-0249

HistoryFeb 08, 2005 - 5:00 a.m.

CVE-2005-0249

2005-02-0805:00:00

mitre

web.nvd.nist.gov

cve-2005-0249

symantec antivirus library

buffer overflow

remote code execution

upx compressed file

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.005

Percentile

75.6%

JSON

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Affected configurations

Nvd

Node

symantecantivirus_scan_engineRange<4.3.3

symantecbrightmail_antispamMatch4.0

symantecbrightmail_antispamMatch5.5

symantecclient_securityMatch1.0.1_build_8.01.434mr3

symantecclient_securityMatch1.0.1_build_8.01.437

symantecclient_securityMatch1.0.1_build_8.01.446mr4

symantecclient_securityMatch1.0.1_build_8.01.457mr5

symantecclient_securityMatch1.0.1_build_8.01.460mr6

symantecclient_securityMatch1.0.1_build_8.01.464mr7

symantecclient_securityMatch1.0.1_build_8.01.471mr8

symantecclient_securityMatch1.1.1_mr1_build_8.1.1.314a

symantecclient_securityMatch1.1.1_mr2_build_8.1.1.319

symantecclient_securityMatch1.1.1_mr3_build_8.1.1.323

symantecclient_securityMatch1.1.1_mr4_build_8.1.1.329

symantecclient_securityMatch1.1.1_mr5_build_8.1.1.336

symantecgateway_securityMatch1.0

symantecgateway_securityMatch2.0

symantecgateway_securityMatch2.0.1

symantecmail_securityMatch4.0domino

symantecmail_securityMatch4.1build_458exchange

symantecmail_securityMatch4.1build_459exchange

symantecmail_securityMatch4.1build_461exchange

symantecmail_securityMatch4.5_build_719exchange

symantecnorton_antivirusMatch2.18_build_83exchange

symantecnorton_antivirusMatch8.1.1.319corporate

symantecnorton_antivirusMatch8.1.1.323corporate

symantecnorton_antivirusMatch8.1.1.329corporate

symantecnorton_antivirusMatch8.1.1_build8.1.1.314acorporate

symantecnorton_antivirusMatch8.01.434corporate

symantecnorton_antivirusMatch8.01.437corporate

symantecnorton_antivirusMatch8.01.446corporate

symantecnorton_antivirusMatch8.01.457corporate

symantecnorton_antivirusMatch8.01.460corporate

symantecnorton_antivirusMatch8.01.464corporate

symantecnorton_antivirusMatch8.01.471corporate

symantecnorton_antivirusMatch9.0macintosh_corporate

symantecnorton_antivirusMatch2004windows

symantecnorton_internet_securityMatch2004professional

symantecnorton_system_worksMatch2004windows

symantecsav_filter_domino_nt_portsMatchbuild3.0.5aix

symantecsav_filter_domino_nt_portsMatchbuild3.0.5os_400

symantecsav_filter_for_domino_ntMatch3.1.1

symantecweb_securityMatch3.01.59

symantecweb_securityMatch3.01.60

symantecweb_securityMatch3.01.61

symantecweb_securityMatch3.01.62

symantecweb_securityMatch3.01.63

symantecweb_securityMatch3.01.67

symantecweb_securityMatch3.01.68

VendorProductVersionCPE
symantecantivirus_scan_engine*cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*
symantecbrightmail_antispam4.0cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*
symantecbrightmail_antispam5.5cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.434cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.437cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.446cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.457cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.460cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.464cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*
symantecclient_security1.0.1_build_8.01.471cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	antivirus_scan_engine	*	cpe:2.3:a:symantec:antivirus_scan_engine::::::::
symantec	brightmail_antispam	4.0	cpe:2.3:a:symantec:brightmail_antispam:4.0:::::::*
symantec	brightmail_antispam	5.5	cpe:2.3:a:symantec:brightmail_antispam:5.5:::::::*
symantec	client_security	1.0.1_build_8.01.434	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3::::::
symantec	client_security	1.0.1_build_8.01.437	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:::::::*
symantec	client_security	1.0.1_build_8.01.446	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4::::::
symantec	client_security	1.0.1_build_8.01.457	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5::::::
symantec	client_security	1.0.1_build_8.01.460	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6::::::
symantec	client_security	1.0.1_build_8.01.464	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7::::::
symantec	client_security	1.0.1_build_8.01.471	cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8::::::