6184 matches found
Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting
Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software...
Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting
source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software blocks a restricted website and an error message containing the requested URL is...
Microsoft Windows XP20002003 - Message Queuing Service Heap Overflow
Microsoft Windows XP20002003 - Message Queuing Service Heap Overflow source: https://www.securityfocus.com/bid/8783/info It has been reported that the Microsoft Message Queuing service is prone to a heap overflow. The Symantec DeepSight analyst team is currently analyzing proof-of-concept exploit...
CVE-2003-0470
Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...
Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite
Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...
Symantec Norton AntiVirus 2002/2003 - Device Driver Memory Overwrite
source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation handlers attempts to write data to an address offset from a pointer...
Microsoft Outlook Express 56 - Script Execution
Microsoft Outlook Express 56 - Script Execution source: https://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but...
Microsoft Outlook Express 5/6 - Script Execution
source: https://www.securityfocus.com/bid/8281/info It has been reported that a weakness may have been re-introduced into Microsoft Outlook Express. According to the source, the issue described in Bugtraq ID 3334 had been fixed by Microsoft but appears to have resurfaced. It should be noted that...
Symantec ActiveX control vulnerable to buffer overflow
Overview There is a buffer overflow in a component of Symantec's web-based Security Check. Description Symantec describes Security Check as "a free web-based tool that enables users to test their computer's exposure to a wide range of on-line threats. As part of running the check, users may insta...
CVE-2003-0470
Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...
CVE-2003-0470
The CVE-2003-0470 entry concerns the Buffer Overflow in the RuFSI Utility Class ActiveX control (the RuFSI Registry Information Class) used by Symantec Security Check. The vulnerability arises in the ActiveX control’s handling of a long argument to CompareVersionStrings, enabling remote code exec...
CVE-2003-0470: Undefined Security Weakness
Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...
[Full-Disclosure] Symantec ActiveX control buffer overflow
Security Advisory Name: Symantec ActiveX control buffer overflow. Systems Affected : Symantec Security Check service. Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 06/23/03 Advisory Number: CC060304 Overview: Symantec has a free online service for virus and security scan...
CVE-2002-1463
Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...
Mozilla 1.x opera 67 - Timed document.write Method Cross Domain Policy
Mozilla 1.x opera 67 - Timed document.write Method Cross Domain Policy source: https://www.securityfocus.com/bid/7847/info It has been reported that under some circumstances, it is possible violate the cross-domain restriction of browser security. Because of this, an attacker may be able to execu...
CVE-2002-0302
The CVE-2002-0302 issue affects the Notify daemon in Symantec Enterprise Firewall (SEF) 6.5.x. When SNMP is used as the transport, the daemon drops large alerts, which could prevent some alerts from being sent during an attack. This reduces visibility of events that would otherwise trigger notifi...
CVE-2002-0538
FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0 rewrites an FTP server's "FTP PORT" responses in a way that allows remote attackers to redirect FTP data connections to arbitrary ports, a variant of the "FTP bounce" vulnerability...
CVE-2002-0538
CVE-2002-0538 concerns the FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7.0, which rewrites FTP PORT responses to enable remote attackers to redirect FTP data connections to arbitrary ports. This is described as a variant of the FTP bounce vulnerability. The connected documents corr...
CVE-2002-0663
Technical details about CVE-2002-0663 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are available here. Monitor for updates.