5333 matches found
CVE-2007-1476
The vulnerability CVE-2007-1476 affects the Symantec SYMTDI.SYS device driver in Norton products (Norton Personal Firewall 2006 9.1.1.7 and earlier; Internet Security 2005/2006; AntiVirus Corporate Edition 3.0.x–10.1.x) and related Norton products. A local attacker can cause a denial of service (...
Symantec Norton个人防火墙SymTDI驱动本地拒绝服务漏洞
Symantec Norton个人防火墙是非常流行的防火墙软件。 Norton个人防火墙的驱动实现上存在漏洞，本地攻击者可能利用此漏洞导致系统崩溃。 Norton个人防火墙没有充分地保护其\Device\SymEvent驱动，且没有验证输入缓冲区，因此本地攻击者可以打开这个驱动并发送被认为是有效的任意数据。当在输入缓冲区中重组数据时驱动可能会执行无效的内存操作，导致整个操作系统拒绝服务。 Symantec Norton Personal Firewall 2006 9.1.1.7 Symantec Norton Personal Firewall 2006 9.1.0.33 Symant...
Symantec 'SYMTDI.SYS' Device Driver - Local Denial of Service
source: https://www.securityfocus.com/bid/22977/info Symantec 'SYMTDI.SYS' device driver is prone to a local denial-of-service vulnerability. A local authenticated attacker may exploit this issue to crash affected computers, denying service to legitimate users. This issue is similar to the one...
SupportSoft tgctlsi.dll ActiveX control buffer overflow
Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...
SupportSoft tgctlsi.dll ActiveX control buffer overflow
Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...
Symantec SYMTDI.SYS Device Driver - Local Denial of Service
Symantec SYMTDI.SYS Device Driver - Local Denial of Service source: https://www.securityfocus.com/bid/22977/info Symantec 'SYMTDI.SYS' device driver is prone to a local denial-of-service vulnerability. A local authenticated attacker may exploit this issue to crash affected computers, denying...
Symantec Norton Personal Firewall / Norton Internet Security buffer overflow
DeviceSymEvent driver interface buffer overflow...
SupportSoft tgctlsi.dll ActiveX control buffer overflow
Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...
SupportSoft tgctlsi.dll ActiveX control buffer overflow
Added: 03/15/2007 CVE: CVE-2006-6490 BID: 22564 OSVDB: 33481 Background SupportSoft ActiveX controls are used by third-party products to provide remote technical support. Problem SupportSoft ActiveX controls are affected by multiple buffer overflow vulnerabilities which can lead to command...
Symantec Mail Security for SMTP Message Handling Arbitrary Code Execution
Symantec Mail Security for SMTP, which provides antispam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. There is reportedly an issue with the version of Symantec Mail Security for SMTP on the remote host that can be triggered by messages with malform...
Symantec Mail Security for SMTP Admin Center Default Credentials
Symantec Mail Security for SMTP, which provides anti-spam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The installation of SMS for SMTP on the remote host uses a default username / password combination to control access to its administrative control...
Symantec MailSecurity DoS
Crash on malcrafted mail headers parsing...
CVE-2007-1252
Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...
Buffer overflow
Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...
CVE-2007-1252
Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...
CVE-2007-1252
Symantec Mail Security for SMTP (SMS for SMTP) vulnerable to a buffer overflow when processing malformed email headers in version 5.0 before Patch 175. The issue can crash the affected service and may allow arbitrary code execution. Exploitation, if achieved, would grant an attacker full control ...
Symantec Mail Security for SMTP arbitrary code execution vulnerability
Overview Symantec Mail Security for SMTP contains a vulnerability that may allow an attacker to execute arbitrary code, or create a denial of service condition. Description Symantec Mail Security for SMTP is an antispam, antivirus, and content filtering software package that scans email. Symantec...
Symantec Security Advisory SYM07-002 http://www.symantec.com/avcenter/security/Content/2007.02.22.html BID 22564 22 Feb, 2007 Stack Overflow in Third-Party ActiveX Controls affects Multiple Vendor Products Including Some Symantec Consumer Products and Automated Support Assistant Revision History...
Supportsoft ActiveX used in Symantec's products buffer overflow
Stack overrun stack buffer overflow...
SupportSoft ActiveX controls contain multiple buffer overflows
Overview The SupportSoft ActiveX controls contain multiple buffer overflow vulnerabilities, which could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description SupportSoft provides multiple ActiveX packages that are used by third party vendors to...