CVE-2007-3771 : Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Syman

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.

Published 2007-07-15 22:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowDenial of service

Products affected by CVE-2007-3771

Symantec » Norton Antivirus » Version: 9.0.1.1000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.4 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.4:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.1.1.1000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.1.1.1000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2020 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2020:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2021 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2010 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2010:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.2 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.2:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.1 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.1:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.2.1000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.2.1000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2011 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2011:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.5.1100 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.5.1100:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.5 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.5:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.0.338 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.0.338:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2001 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2001:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.2.2002 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.2.2002:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 9.0.3.1000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:9.0.3.1000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.1.1007 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1007:*:corporate:*:*:*:*:*
Matching versions
Symantec » Norton Antivirus » Version: 10.0.1.1000 Corporate Edition
cpe:2.3:a:symantec:norton_antivirus:10.0.1.1000:*:corporate:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 2.0
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0
cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.1.1007
cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2.2021
cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2.2000
cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2.2001
cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2.2002
cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.1.1000
cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2.2011
cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.1.1009
cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*
Matching versions
Symantec » Client Security » Version: 3.0.2
cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-3771

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 13 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3771

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:S/C:N/I:N/A:C	3.1	6.9	NIST
Access Vector: Local Access Complexity: Low Authentication: Single Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-3771

Jump to

Vulnerability Details : CVE-2007-3771

Products affected by CVE-2007-3771

Exploit prediction scoring system (EPSS) score for CVE-2007-3771

CVSS scores for CVE-2007-3771

References for CVE-2007-3771