CVE-2006-3456: Improper Control of Generation of Code

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

CVE-2006-6490: Undefined Security Weakness

Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...

CVE-2006-5404: Undefined Security Weakness

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5403: Undefined Security Weakness

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...