CVE-2004-0444

CVE-2004-0444 involves SYMDNS.SYS in Symantec/Norton firewall and security products (consumer and corporate) and affects NBNS/DNS processing. A remote, unauthenticated attacker can trigger a stack overflow via a manipulated NBNS length field, a heap corruption in NBNS responses, or a DNS processi...

CVE-2007-1793

SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 (versions 9.1.0.33 and 9.1.1.7) does not validate certain arguments passed to hooked SSDT function handlers, allowing local users to crash the system or potentially execute arbitrary code via crafted arguments to NtCreateMutant and NtOpenEven...

CVE-2007-1476

The vulnerability CVE-2007-1476 affects the Symantec SYMTDI.SYS device driver in Norton products (Norton Personal Firewall 2006 9.1.1.7 and earlier; Internet Security 2005/2006; AntiVirus Corporate Edition 3.0.x–10.1.x) and related Norton products. A local attacker can cause a denial of service (...

CVE-2004-0363

CVE-2004-0363 describes a stack-based buffer overflow in the SymSpamHelper ActiveX control (symspam.dll) used by Norton AntiSpam 2004 (in Norton Internet Security 2004). A long parameter to LaunchCustomRuleWizard can allow a remote attacker to execute arbitrary code. Public references cite Metasp...

CVE-2007-3673

Summary of CVE-2007-3673 (Symantec SYMTDI.SYS Local Privilege Escalation) A memory overwrite vulnerability exists in the SYMTDI.SYS device driver when processing IOCTL 0x83022323 to the \symTDI\ interface. This allows a local attacker to gain elevated privileges (SYSTEM) on affected systems. Affe...

CVE-2004-0445

The CVE-2004-0445 issue affects Symantec Symantec Norton Internet Security/Professional (2002–2004), Norton Personal Firewall (2002–2004), Norton AntiSpam 2004, and corporate products Client Firewall 5.01/5.1.1 and Client Security 1.0–2.0, via the SYMDNS.SYS DNS/NBNS processing driver. A speciall...