CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

CVE-2007-0447

The CVE-2007-0447 entry corresponds to a heap-based buffer overflow in the Decomposer used by Symantec products (notably Symantec Antivirus Scan Engine / Mail Security for Exchange/Domino) when processing crafted CAB archives, enabling remote code execution. Connected details corroborate: a heap ...

CVE-2005-0249

Concretely affected: Symantec AntiVirus/Scan Engine DEC2EXE parsing engine (DEC2EXE.dll) used in the Symantec Antivirus Library. Issue: a heap-based buffer overflow caused by improper bounds checking when parsing UPX-compressed files, triggered by a crafted UPX file with a negative virtual offset...

CVE-2006-4013

CVE-2006-4013 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is accessible from any computer, remote attackers can exploit directory traversal in the DATABLOB-GET and DATABLOB-SAVE requests to read and overwrite files. The vulnerability enables remote access w...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

CVE-2004-1768

Symantec Brightmail AntiSpam 6.0.1 (before patch 132) is affected by a denial-of-service in the Spamhunter and Language ID character converters when processing messages using ISO-8859-10. The converters crash due to an unrecognized character set. Affected component: character converters in Spamhu...

CVE-2005-4695

Technical details about CVE-2005-4695 are not publicly available in the provided connected documents. The initial description remains the only explicit detail. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2004-0671

CVE-2004-0671 affects Brightmail Spamfilter 6.0 and earlier beta releases. The vulnerability arises in the web interface via the viewMsgDetails.do request where an attacker can modify the id parameter to read mail belonging to other users. This is a remote, unauthenticated issue with potential ex...

CVE-2006-4014

CVE-2006-4014 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is allowed to connect from any machine, remote attackers can trigger a denial of service (application freeze) by sending invalid posts. The public details specify the vulnerability class and affected...