Symantec Antivirus Engine Detection (Windows SMB Login)

Detects the installed version of Symantec Antivirus Engine. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Symantec Antivirus Decomposer Engine dec2lha Library Remote Stack Buffer Overflow (CVE-2016-2210)

A stack buffer overflow vulnerability exist in the Symantec Antivirus Decomposer Engine dec2lha Library. This vulnerability is due to incorrect decompression of the LZH and LHA archives...

Symantec Integer Overflow in TNEF decoder (CVE-2016-3645)

Multiple vulnerabilities exist in the Decomposer component of Symantec Antivirus Engine. These vulnerabilities are due to incorrect or missing bounds checks. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a maliciously crafted file to a user running this engine...

Symantec Endpoint Protection Multiple Vulnerabilities (Jul 2016)

Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Norton 360 Decomposer Engine Multiple Parsing Vulnerabilities

Symantec Norton 360 is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:symantec:norton360";...

Symantec Antivirus Engine Denial of Service Vulnerability - Windows

Symantec Antivirus Engine is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Antivirus Engine ASPack Remote Memory Corruption (CVE-2016-2208)

A Memory Corruption vulnerability exist in the Symantec Antivirus Engine in ASPack early version. This vulnerability is due to incorrect parsing of executables packed by ASPack early version...

Symantec Norton AntiVirus Decomposer Engine Multiple Parsing Vulnerabilities

Symantec Norton AntiVirus is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec PowerPoint Misaligned Stream Remote Stack Buffer Overflow (CVE-2016-2209)

Multiple vulnerabilities exist in the Decomposer component of Symantec Antivirus Engine. These vulnerabilities are due to incorrect and missing bounds checks. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a maliciously crafted file to a user running this engine...

Symantec Norton Internet Security Decomposer Engine Multiple Parsing Vulnerabilities

Symantec Norton Internet Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Norton Security Decomposer Engine Multiple Parsing Vulnerabilities

Symantec Norton Security is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Antivirus Multiple Remote Memory Corruption Unpacking RAR (CVE-2016-2207)

Multiple vulnerabilities exist in the Decomposer component of Symantec Antivirus Engine. These vulnerabilities are due to incorrect or missing bounds checks. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a maliciously crafted file to a user running this engine...

Symantec Antivirus multiple remote memory corruption unpacking MSPACK Archives (CVE-2016-2211)

Multiple vulnerabilities exist in the Decomposer component of Symantec Antivirus Engine. These vulnerabilities are due to incorrect or missing bounds checks. A remote, unauthenticated attacker could exploit these vulnerabilities by sending a maliciously crafted file to a user running this engine...

Symantec Endpoint Protection Manager Privilege Bypass Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. A privilege bypass vulnerability exists in SEPM version 12.1, which can be exploited by an attacker to bypass the lockout threshold restriction with authorized window access...

Symantec Mail Security for Exchange / Domino Decomposer Engine Multiple Vulnerabilities (SYM16-010)

The version of Symantec Mail Security for Exchange or Domino installed on the remote Windows host is affected by multiple vulnerabilities in the decomposer engine : - An array indexing error exists in the UnRAR component in the Unpack::ShortLZ function in unpack15.cpp that is triggered when...

Symantec Endpoint Protection Manager and Client Information Disclosure Vulnerability (CNVD-2016-04461)

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. An information disclosure vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to disclose server...

Symantec Endpoint Protection Manager and Client Privilege Gain Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. A privilege acquisition vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to obtain a valid system...

Symantec Endpoint Protection Manager and Client Unauthorized Access Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. An unauthorized access vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to access the PHP JSESSIONI...

CVE-2016-5307

Directory traversal vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors...

CVE-2016-5307

Directory traversal vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to read arbitrary files in the web-root directory tree via unspecified vectors...