CVE-2007-2955 : Multiple unspecified "input validation error" vulnerabilities in multiple Active

Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.

Published 2007-08-09 21:17:00

Updated 2025-04-09 00:30:58

Source Flexera Software LLC

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2007-2955

Symantec » Norton Antivirus » Version: 2006
cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2006
cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*
Matching versions
Symantec » Norton Internet Security » Version: 2005 Anti Spyware Edition
cpe:2.3:a:symantec:norton_internet_security:2005:*:anti_spyware:*:*:*:*:*
Matching versions
Symantec » Norton System Works » Version: 2006
cpe:2.3:a:symantec:norton_system_works:2006:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-2955

EPSS FAQ

10.58%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 93 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-2955

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

References for CVE-2007-2955

Jump to

Vulnerability Details : CVE-2007-2955

Products affected by CVE-2007-2955

Exploit prediction scoring system (EPSS) score for CVE-2007-2955

CVSS scores for CVE-2007-2955

References for CVE-2007-2955