Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit malicious executable content to bypass scanning by the software...

CVE-2004-0363

Stack-based buffer overflow in the SymSpamHelper ActiveX component symspam.dll in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method...

CVE-2004-0364

The WrapNISUM ActiveX component WrapUM.dll in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method...

Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...

Norton AntiSpam contains boundary error within the "SymSpamHelper Class" (symspam.dll) ActiveX component.

Overview Symantec's Norton AntiSpam is a software package that provides spam filtering. A vulnerability in an ActiveX control that ships with Norton AntiSpam may permit a remote attacker to execute arbitrary code on the local system. Description Symantec Norton AntiSpam for Windows installs the...

CVE-2004-0364

The CVE-2004-0364 vulnerability affects Norton Internet Security 2004 (WrapNISUM/WrapUM.dll ActiveX). The ActiveX control is marked safe for scripting, enabling a remote attacker to cause the browser to execute arbitrary programs via the LaunchURL method when a user visits a malicious page or HTM...

CVE-2004-0363

Stack-based buffer overflow in the SymSpamHelper ActiveX component symspam.dll in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method...

CVE-2004-0364

The WrapNISUM ActiveX component WrapUM.dll in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method...

CVE-2004-0363

CVE-2004-0363 describes a stack-based buffer overflow in the SymSpamHelper ActiveX control (symspam.dll) used by Norton AntiSpam 2004 (in Norton Internet Security 2004). A long parameter to LaunchCustomRuleWizard can allow a remote attacker to execute arbitrary code. Public references cite Metasp...

Norton Internet Security Remote Command Execution (#NISR19042004b)

NGSSoftware Insight Security Research Advisory Name: Norton Internet Security Remote Command Execution Systems Affected: XP not confirmed on 2000; NIS & NIS Pro 2004, not confirmed on previous versions. Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected]...

[VulnWatch] Norton AntiSpam Remote Buffer Overrun (#NISR19042004a)

NGSSoftware Insight Security Research Advisory Name: Norton AntiSpam Remote Buffer Overrun Systems Affected: Windows XP not confirmed on 2000 Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected] Date Vendor Notified: 4th March 2004 Date of Public Advisor...

Norton Antispam buffer overflow

Buffer overflow in SymSpamHelper and WrapNISUM ActiveX...

Norton AntiVirus Detection and Status (deprecated)

This plugin has been deprecated. It has been replaced by Symantec Antivirus Software Detection and Status, ID 21725. %NASLMINLEVEL 999999 This script has been rewritten by Tenable Network Security Original script was written by Jeff Adams ; @DEPRECATED@ Disabled on 2017/04/24. Deprecated by...

NAV bugs!

Subject: NAV bugs! Published: Friday, 05 March, 2004 Updated: 06-Mar-04 Discovered By: Bipin Gautam hUNT3R Product Version: Norton Antivirus 2002 ver: 8.00.58 Only tested On... Risk Impact: Low-Medium Details: During a 'manual scan' of a folder, if Norton Antivirus NAV encounters a file /folder...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

CVE-2003-1451

Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that contains a file with a long filename...

CVE-2003-1310

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

Norton Internet Security crossite scripting

In URL blocking message URL is not escaped...

Norton Internet Security 2003 XSS

DigitalPranksters Security Advisory http://www.DigitalPranksters.com Norton Internet Security Blocked Sites XSS Risk: Low Product: Norton Internet Security 2003 v6.0.4.34 Maybe others we only tested this version Product URL: http://www.symantec.com/sabu/nis/nispe/index.html Found By: KrazySnake -...