Symantec » Norton System Works : Security Vulnerabilities, CVEs, Published In 2007 (Denial of service) CVSS score >= 2
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Max CVSS
9.3
EPSS Score
4.40%
Published
2007-10-05
Updated
2012-10-31
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions. NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.
Max CVSS
4.9
EPSS Score
0.04%
Published
2007-04-02
Updated
2018-10-16
2 vulnerabilities found