CVE-2019-9698

Symantec AV Engine, prior to 13.0.9r17, may be susceptible to an arbitrary file deletion issue, which is a type of vulnerability that could allow an attacker to delete files on the resident system without elevated privileges...

Symantec Antivirus Engine Detection (Windows SMB Login)

Detects the installed version of Symantec Antivirus Engine. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2016-2208

The kernel component in Symantec Anti-Virus Engine AVE 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service memory access violation and system crash via a malformed PE header file...

Symantec Antivirus Engine 20151.1.0.32 Malformed PE Header Parser Memory Access Violation (SYM16-008)

The version of Symantec Antivirus Engine AVE installed on the remote host is 20151.1.0.32. It is, therefore, affected by a remote code execution vulnerability due to improper parsing of malformed portable-executable PE header files and executables packed with early versions of Aspack. A remote...

Symantec Anti-virus Engine Denial of Service Vulnerability

Symantec Anti-virus Engine AVE is a network service from Symantec, Inc. that provides virus scanning and virus remediation for application data traveling over a network. A security vulnerability exists in Symantec AVE version 20151.1.0.32. The vulnerability can be exploited by an attacker to caus...

Symantec Antivirus Engine CVE-2016-2208 Memory Corruption Vulnerability

Description Symantec Antivirus Engine is prone to a remote memory-corruption vulnerability. An attackers can exploit this issue to execute arbitrary code with root privileges. Failed exploit attempts will result in denial-of-service conditions. Technologies Affected Symantec Anti-Virus Engine...

[Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation

Symantec Antivirus Engine is prone to a local privilege escalation vulnerability. Two Device Drivers are affected: NAVEX15.sys, NAVENG.sys. NAVEX15.sys LOW CONSTANT VALUE PAGE:0004B611 sub edx, 222AD3h PAGE:0004B617 push esi PAGE:0004B618 jz short loc4B63C loc4B63C: mov edx, ecx+3Ch PAGE:0004B63F...