CVE-2004-1910 rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported a...
MediumCVSS 5.0
EPSS 3.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service (crash) via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is acknowledged.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec security check virus detection | All versions | No fix listed |
References
- 20040407 Symantec, McAfee and Panda ActiveX controls mailing-list
- 20040407 Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow mailing-list
- 20040408 Re: Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow, Apr 7 mailing-list
- 10069 exploit vdb-entry
- symantec-sc-rufsi-bo(15778) vdb-entry