CVE-2005-3378

CVE-2005-3378 affects Norman 5.81 with the 5.83.02 engine. A interpretation error in handling files containing an MZ (EXE) magic byte sequence causes such files (e.g., BAT, HTML, EML) to be treated as safe types, enabling a “magic byte bug” where content can still execute as dangerous code. The v...

CVE-2007-3953

CVE-2007-3953 affects Norman Antivirus prior to 5.91.02. The vulnerability lies in the OLE2 parsing component, where processing a crafted DOC file triggers a divide-by-zero error, enabling a remote attacker to cause a denial of service. The provided sources do not include exploit details or concr...

CVE-2007-3951

CVE-2007-3951 corresponds to multiple buffer overflows in Norman Antivirus 5.90. The vulnerability arises in the handling of two crafted file types, ACE and LZH, due to an integer cast around. This enables remote attackers to execute arbitrary code, with a network attack vector and no authenticat...

CVE-2007-4648

The CVE-2007-4648 entry describes a local privilege escalation in Norman Virus Control (NVC) 5.82 via the nvcoaft51 driver. The NvcOa device exposes weak permissions (unrestricted write access), enabling exploitation by: (1) triggering a kernel pool buffer overflow through a string argument to io...