CVE-2004-0363 Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code vi...
HighCVSS 7.5
EPSS 66.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton antispam | = 2004 | No fix listed |
References
- 20040319 Norton AntiSpam Remote Buffer Overrun (#NISR19042004a) mailing-list
- 20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b mailing-list
- 11169 third-party-advisory
- VU#344718 third-party-advisory us-government-resource
- www.nextgenss.com patch vendor-advisory
- www.sarc.com
- 9916 vdb-entry vendor-advisory
- nas-launchcustomrulewizard-bo(15536) vdb-entry