CVE-2003-1149: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

CVE-2004-1910: Undefined Security Weakness

rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...

CVE-2005-1346

Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote...

CVE-2005-0618

The SMTP binding function in Symantec Firewall/VPN Appliance 200/200R firmware after 1.5Z and before 1.68, Gateway Security 360/360R and 460/460R firmware before vuild 858, and Nexland Pro800turbo, when configured for load balancing between two WANs, might send SMTP traffic to a trusted network...

CVE-2005-0922

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

CVE-2005-0923

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0817

Unknown vulnerability in the DNSd proxy, as used in Symantec Gateway Security 5400 2.x and 5300 1.x, Enterprise Firewall 7.0.x and 8.x, and VelociRaptor 1100/1200/1300 1.5, allows remote attackers to poison the DNS cache and redirect users to malicious sites...

CVE-2005-1346

CVE-2005-1346 affects multiple Symantec AntiVirus products running on Windows (e.g., Norton AntiVirus 2005 11.0.0; Web Security 3.0.1.72; Mail Security for SMTP 4.0.5.66; AntiVirus Scan Engine 4.3.7.27; SAV/Filter for Domino NT 3.1.1.87; Mail Security for Exchange 4.5.4.743). The vulnerability al...

CVE-2005-1346

Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote...

CVE-2004-0369

The CVE-2004-0369 entry describes a buffer overflow in the Entrust LibKmp ISAKMP library, used by Symantec Enterprise Firewall 7.0–8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5. The underlying flaw allows remote attackers to execute arbitrary code via a crafted I...

CVE-2004-0369

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload...

CVE-2004-0369: Undefined Security Weakness

Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload...

Symantec Norton AntiVirus vulnerable to DoS via the Auto-Protect "SmartScan" feature

Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module SmartScan feature scans a renamed file on a network share. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic...

Symantec Norton AntiVirus vulnerable to DoS via the "Auto-Protect" module

Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module scans certain files. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic file scanning and detection of viruse...

CVE-2005-0922

CVE-2005-0922 affects Symantec Norton AntiVirus 2004/2005 (also used in Internet Security 2004/2005 and System Works 2004/2005). The Auto-Protect real-time scanning module can be triggered by certain file types to cause a denial of service, potentially hanging or crashing the system. The vulnerab...

CVE-2005-0923

Symantec Norton AntiVirus 2004/2005 (including Internet Security 2004/2005 and System Works 2004/2005) contains a DoS vulnerability in the Auto-Protect module’s SmartScan feature. Renaming a file on a network share can trigger excessive CPU usage, leading to a system hang or crash. The issue affe...

CVE-2005-0922

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

CVE-2005-0923

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0922: Undefined Security Weakness

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

CVE-2005-0923: Undefined Security Weakness

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...