Design/Logic Flaw

The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly...

CVE-2008-0312

CVE-2008-0312 is a stack-based buffer overflow in the AutoFix Support Tool ActiveX control SYMADATA.DLL v2.7.0.1, used by Norton products (e.g., Norton 360 1.0, AntiVirus/Internet Security/System Works 2006–2008). The overflow occurs via a long argument to GetEventLogInfo and could allow remote c...

CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute...

CVE-2008-0313

The CVE-2008-0313 issue affects the SymAData.ActiveDataInfo.1 ActiveX control (SYMADATA.DLL, version 2.7.0.1) shipped with multiple Norton products (Norton 360 1.0; AntiVirus 2006–2008; Internet Security 2006–2008; System Works 2006–2008). The vulnerability is a design/logic flaw in ActiveDataInf...

iDefense Security Advisory 04.02.08: Symantec Norton Internet Security 2008 ActiveX Control Buffer Overflow Vulnerability

iDefense Security Advisory 04.02.08 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 02, 2008 I. BACKGROUND Norton Internet Security 2008 is a system security suite that offers protection from spyware, viruses, identity theft, spam, and malicious network traffic. More information can be...

[Full-disclosure] Local Privilege Escalation in Norton AntiVirus for Mac

Text from URL: http://blog.carrel.org/2007/11/security-advisory-norton-antivirus-for.html == Synopsis == Symantec's Norton AntiVirus for Macintosh NAV contains a vulnerability that can lead to local privilege escalation from group admin to root the super-user without any of the usual password...

Symantec Norton AntiVirus for Mac privilege escalation

External application is executed by relative path...

CVE-2007-5829

The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions group writable, which allows local admin users to gain root privileges by replacing...

CVE-2002-2336

Summary: CVE-2002-2336 affects Norton Personal Firewall 2002 4.0. When configured to automatically block attacks, it allows remote attackers to block IP addresses and cause a denial of service through spoofed packets. The available sources (NVD/Red Hat/Rapid CVE entries) describe the same behavio...

CVE-2002-2336

Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets...

CVE-2003-1451

Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename...

CVE-2003-1451

CVE-2003-1451 affects Symantec Norton AntiVirus 2002. A buffer overflow can be triggered by an e‑mail attachment containing a ZIP file with a long filename, allowing remote code execution. This is the base description from multiple sources (NVD/CVE entries). The connected documents confirm the vu...

CVE-2007-5047

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

Code injection

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

CVE-2007-5047

The vulnerability CVE-2007-5047 affects Norton Internet Security 2008 (build 15.0.0.60) where NtOpenSection SSDT hooks are not properly validating parameters passed to SSDT function handlers, enabling local users to trigger a crash (DoS) and potentially gain privileges via the kernel NtOpenSectio...

CVE-2007-5047

Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the NtOpenSection kernel SSDT hook. NOTE: the NtCreateMutan...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...

Symantec Norton NavComUI ActiveX control vulnerability

Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...