EUVD-2006-3719

Malware in sbrugna...

EUVD-2002-1757

Malware in sbrugna...

EUVD-2002-2314

Malware in sbrugna...

EUVD-2002-1758

Malware in sbrugna...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-1779

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

CVE-2002-2336

Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2002-2336: Undefined Security Weakness

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

Buffer overflow

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689

The CVE-2007-1689 entry concerns a stack buffer overflow in the ISAlertDataCOM ActiveX control (ISLALERT.DLL) shipped with Norton Personal Firewall 2004 and Norton Internet Security 2004. The vulnerability is triggered by long arguments to the Get() and Set() methods of the ISAlertDataCOM control...

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1689: Undefined Security Weakness

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the 1 Get and 2 Set functions...

CVE-2007-1793

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service crash or possibly execute arbitrary code via crafted arguments to the 1...

CVE-2007-1793: Improper Input Validation

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service crash or possibly execute arbitrary code via crafted arguments to the 1...

Symantec Norton Personal Firewall 2006 SymEvent驱动本地拒绝服务漏洞

Symantec Norton Personal Firewall是一款流行的个人桌面防火墙。 Symantec Norton Personal Firewall 2006包含的SymEvent驱动存在问题，本地攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 SymEvent不充分保护其他恶意应用程序对'\Device\SymEvent'的操作及对输入缓冲区验证存在问题，可导致可以打开这个驱动，发送任意数据给它，而驱动没有进行验证的就认为输入合法，可组合输入缓冲区中的数据执行非法内存操作，使系统崩溃。 Symantec Norton Personal Firewall 2006 9.1....

CVE-2007-1495

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service system crash via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of...

CVE-2007-1495: Undefined Security Weakness

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service system crash via invalid data, as demonstrated by calling DeviceIoControl to send the data, a reintroduction of...

CVE-2007-1476: Improper Input Validation

The SymTDI device driver SYMTDI.SYS in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service system crash by sending crafted data to...