CVE-2009-3104

Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning i...

CVE-2009-3104

Technical details about CVE-2009-3104 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.

多个Symantec产品RAR/TAR/ZIP文件扫描绕过漏洞

Bugraq ID: 35354 多个Symantec产品对畸形或特殊格式的压缩档文件如tar/zip/rar/缺少真确处理，可导致绕过扫描产品的检测。 攻击者构建恶意的文件，发送给目标用户，可绕过检测使应用程序展开并执行。 目前没有详细漏洞细节提供。 Symantec Symantec AntiVirus Scan Engine for Microsoft ISA 4.3.12 Symantec Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec Scan Engine 5.1.6.31 Symantec Scan Engine...

Symantec Norton Ghost Symantec.EasySetup.1 ActiveX控件拒绝服务漏洞

BUGTRAQ ID: 34696 CVECAN ID: CVE-2009-1517 Symantec Norton Ghost是一个备份恢复系统，允许用户将系统恢复到之前的快照状态。 Norton Ghost的EasySetup安装向导的EasySetupInt.dll库提供了名为Symantec.EasySetup.1的ActiveX控件，该控件没有正确地验证对GetBackupLocationPath、CallUninstall、SetupDeleteVolume、...

Design/Logic Flaw

Multiple insecure method vulnerabilities in the Symantec.EasySetup.1 ActiveX control in EasySetupInt.dll 14.0.4.30167 in the EasySetup wizard in Symantec Norton Ghost 14.0 allow remote attackers to cause a denial of service browser crash and possibly execute arbitrary code via unspecified input t...

PT-2009-4014 · Symantec · Symantec Norton Ghost

Name of the Vulnerable Software and Affected Versions: Symantec Norton Ghost version 14.0 Description: The issue concerns insecure methods in the Symantec.EasySetup.1 ActiveX control within the EasySetupInt.dll. This allows remote attackers to potentially cause a denial of service, leading to a...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

The CVE-2009-1428 entry describes two parsing errors in the ccLgView.exe component of the Symantec Log Viewer used by multiple Norton/Symantec products (SAV before 10.1 MR8, SEP before 11.0 MR1, Norton 360 1.0, Norton Internet Security 2005–2008). The vulnerability enables remote XSS via a crafte...

Symantec Log Viewer JavaScript Injection Vulnerabilities

SUMMARY The Log Viewer feature in some Symantec products contains two parsing errors which could be exploited through Java script injection. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Norton 360 | 1.0 | Run LiveUpdate in Interactive Mode Norton Internet Security | 2005 through 200...

Norton Ghost Support module for EasySetup wizard Remote DoS PoC

No description provided by source. ----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author: shinnai mail: shinnaiatautisticidotorg site:...

Symantec Norton Ghost 'EasySetupInt.dll' ActiveX控件远程拒绝服务漏洞

BUGTRAQ ID: 34696 CNCAN ID：CNCAN-2009042404 Symantec Norton Ghost是一款提供备份恢复功能的软件。 Symantec Norton Ghost包含的ActiveX控件存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 Symantec Norton Ghost包含的'EasySetupInt.dll' ActiveX控件对SetupDeleteVolume方法缺少正确处理，构建恶意WEB页，诱使用户打开，可导致应用程序崩溃。 Symantec Norton Ghost 14.0 Symantec Norton Ghost...

Norton Ghost Support Module Denial Of Service

----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ File:...

Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)

----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ File:...

Norton Ghost Support module for EasySetup wizard - Remote Denial of Service (PoC)

Norton Ghost Support module for EasySetup wizard - Remote Denial of Service PoC ----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author:...

Norton Ghost Support module for EasySetup wizard Remote DoS PoC

Exploit for unknown platform in category dos / poc =============================================================== Norton Ghost Support module for EasySetup wizard Remote DoS PoC ===============================================================...

Symantec Product(s) Version Detection

Detects the installed version of Symantec Products. The script logs in via smb, searches for Symantec Products in the registry and gets the version from registry. Copyright C 2009 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute...

Symantec Products Detection (Windows SMB Login)

SMB login-based detection of Symantec products. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...

Norton AntiSpam 2004 SymSpamHelper ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in Norton AntiSpam 2004. When sending an overly long string to the LaunchCustomRuleWizard method of symspam.dll 2004.1.0.147 an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current...