CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-3699. Reason: This candidate is a duplicate of CVE-2007-3699. Notes: All CVE users should reference CVE-2007-3699 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-3801

CVE-2007-3801 is a duplicate of CVE-2007-3699; connected records confirm CVE-2007-3699 details a denial-of-service via PACK_SIZE in RAR headers and a heap overflow in CAB processing within Symantec Decomposer/Scan Engine components. Affected products include Symantec AntiVirus and Symantec Mail S...