Antivirus Scan Engine@4.0 Security Vulnerabilities and Issues — Antivirus Scan Engine@4.0 CVE List

Lucene search

SymantecAntivirus Scan Engine4.0

4 matches found

CVE•added 2007/10/05 9:17 p.m.•58 views

CVE-2007-3699

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

9.3CVSS6.2AI score0.02382EPSS

CVE•added 2005/10/05 7:2 p.m.•55 views

CVE-2005-2758

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.

10CVSS7.7AI score0.22572EPSS

CVE•added 2007/10/05 9:17 p.m.•50 views

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

9.3CVSS7.7AI score0.10844EPSS

CVE•added 2004/04/15 4:0 a.m.•38 views

CVE-2004-0217

The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

7CVSS6.7AI score0.00134EPSS