3 matches found
Design/Logic Flaw
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...
9.3CVSS6.5AI score0.03914EPSS
SaveExploits1References6Affected Software12
Heap overflow
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...
9.3CVSS8.2AI score0.05957EPSS
SaveExploits1References6Affected Software12
CVE-2007-0447
The CVE-2007-0447 entry corresponds to a heap-based buffer overflow in the Decomposer used by Symantec products (notably Symantec Antivirus Scan Engine / Mail Security for Exchange/Domino) when processing crafted CAB archives, enabling remote code execution. Connected details corroborate: a heap ...
9.3CVSS7.7AI score0.05957EPSS
SaveExploits1References6Affected Software10
20