Stack overflow

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

Code injection

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

CVE-2008-0308

Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service memory consumption via a malformed RAR file to the Internet Content Adaptation Protocol ICAP port...

CVE-2008-0309

Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a malformed RAR file to...

CVE-2008-0308

CVE-2008-0308 affects Symantec Decomposer used in Symantec Scan Engine 5.1.2 and earlier versions up to 5.1.6.31. A specially crafted RAR file sent to ICAP port 1344 can cause memory exhaustion leading to DoS; some sources also mention possible arbitrary code execution under user privileges. Reme...

CVE-2008-0309

CVE-2008-0309 describes a stack-based buffer overflow in Symantec Decomposer used by Symantec Scan Engine and related products. When processing a malformed RAR file sent to ICAP port 1344/tcp, unauthenticated remote attackers could trigger arbitrary code execution or cause a denial of service. Af...

Symantec Decomposer引擎RAR文件解析栈溢出漏洞

BUGTRAQ ID: 27913 CVECAN ID: CVE-2008-0309 Symantec的Decomposer引擎用于在扫描恶意内容时解析一些类型的文档内容。 Decomposer引擎处理畸形格式的RAR文档时存在漏洞，如果Decomposer引擎引擎扫描到了畸形的RAR文件的话，就可能触发栈溢出，导致拒绝服务或执行任意指令。 Symantec AntiVirus = 4.3.16.39 Symantec Scan Engine = 5.1.4.24 Symantec Mail Security for Microsoft Exchange = 5.0.4.363...

Symantec Decomposer引擎资源耗尽拒绝服务漏洞

BUGTRAQ ID: 27911 CVECAN ID: CVE-2008-0308 Symantec的Decomposer引擎用于在扫描恶意内容时解析一些类型的文档内容。 Decomposer引擎处理畸形格式的RAR文档时存在漏洞，如果Decomposer引擎引擎扫描到了畸形的RAR文件的话，就可能耗尽大量内存，导致整个系统拒绝服务。 Symantec AntiVirus = 4.3.16.39 Symantec Scan Engine = 5.1.4.24 Symantec Mail Security for Microsoft Exchange = 5.0.4.363 Symant...

iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Denial of Service Vulnerability

iDefense Security Advisory 02.26.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 26, 2008 I. BACKGROUND Symantec Scan Engine is a standalone Anti-Virus Engine that exposes a scanning Application Programming Interface API directly to developers who wish to integrate protection into...

Symantec antiviral engine API multiple security vulnerabilities

Multiple DoS conditions and buffer overflow on RAR archives parsing...

iDefense Security Advisory 02.26.08: Symantec Scan Engine 5.1.2 RAR File Buffer Overflow Vulnerability

iDefense Security Advisory 02.26.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 26, 2008 I. BACKGROUND Symantec Scan Engine is a standalone Anti-Virus Engine that exposes a scanning Application Programming Interface API directly to developers who wish to integrate protection into...

Symantec Veritas Storage Foundation VEA组件堆溢出漏洞

BUGTRAQ ID: 25778 CVECAN ID: CVE-2008-0638 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation在服务组件实现上存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Veritas Storage Foundation的Veritas企业管理员（VEA）组件中的Administrator服务（vxsvc.exe，默认监听于UDP...

Symantec Veritas Storage Foundation Scheduler服务远程拒绝服务漏洞

BUGTRAQ ID: 27440 CVECAN ID: CVE-2007-4516 Veritas Storage Foundation是用于管理Veritas产品存储的解决方案。 Veritas Storage Foundation的Veritas Scheduler服务处理畸形用户请求时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果Veritas Scheduler服务（VxSchedService.exe）接收到了畸形报文，就会触发无效的内存访问，导致该服务崩溃。攻击者无需认证便可以利用这个漏洞，但必须要在服务的4888端口创建TCP会话。 Symantec Verit...

iDefense Security Advisory 02.20.08: Symantec Veritas Storage Foundation Scheduler Service DoS Vulnerability

iDefense Security Advisory 02.20.08 http://labs.idefense.com/intelligence/vulnerabilities/ Feb 20, 2008 I. BACKGROUND The Veritas Storage Foundation is based on the Veritas File System and Veritas Volume Manager products. It allows virtualization of storage over a variety of platforms. It contain...

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability

ZDI-08-007: Symantec VERITAS Storage Foundation Administrator Service Heap Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-007.html February 20, 2008 -- CVE ID: CVE-2008-0638 -- Affected Vendor: Symantec -- Affected Products: Veritas Storage Foundation 5.0 --...

CVE-2008-0638

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...

CVE-2007-4516

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

Code injection

The Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers to cause a denial of service daemon crash or hang via malformed packets...

Heap overflow

Heap-based buffer overflow in the Veritas Enterprise Administrator VEA service aka vxsvc.exe in Symantec Veritas Storage Foundation 5.0 allows remote attackers to execute arbitrary code via a packet with a crafted value of a certain size field, which is not checked for consistency with the actual...