CVE-2005-0249 Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a cr...
HighCVSS 7.5
EPSS 18.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus scan engine | < 4.3.3 | 4.3.3 |
| symantec brightmail antispam | = 4.0 | No fix listed |
| symantec brightmail antispam | = 5.5 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.434-mr3 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.437 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.446-mr4 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.457-mr5 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.460-mr6 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.464-mr7 | No fix listed |
| symantec client security | = 1.0.1_build_8.01.471-mr8 | No fix listed |
| symantec client security | = 1.1.1_mr1_build_8.1.1.314a | No fix listed |
| symantec client security | = 1.1.1_mr2_build_8.1.1.319 | No fix listed |
| symantec client security | = 1.1.1_mr3_build_8.1.1.323 | No fix listed |
| symantec client security | = 1.1.1_mr4_build_8.1.1.329 | No fix listed |
| symantec client security | = 1.1.1_mr5_build_8.1.1.336 | No fix listed |
| symantec gateway security | = 1.0 | No fix listed |
| symantec gateway security | = 2.0 | No fix listed |
| symantec gateway security | = 2.0.1 | No fix listed |
| symantec mail security | = 4.0 | No fix listed |
| symantec mail security | = 4.1-build_458 | No fix listed |
| symantec mail security | = 4.1-build_459 | No fix listed |
| symantec mail security | = 4.1-build_461 | No fix listed |
| symantec mail security | = 4.5_build_719 | No fix listed |
| symantec norton antivirus | = 2.18_build_83 | No fix listed |
| symantec norton antivirus | = 8.1.1.319 | No fix listed |
Show 23 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton antivirus | = 8.1.1.323 | No fix listed |
| symantec norton antivirus | = 8.1.1.329 | No fix listed |
| symantec norton antivirus | = 8.1.1_build8.1.1.314a | No fix listed |
| symantec norton antivirus | = 8.01.434 | No fix listed |
| symantec norton antivirus | = 8.01.437 | No fix listed |
| symantec norton antivirus | = 8.01.446 | No fix listed |
| symantec norton antivirus | = 8.01.457 | No fix listed |
| symantec norton antivirus | = 8.01.460 | No fix listed |
| symantec norton antivirus | = 8.01.464 | No fix listed |
| symantec norton antivirus | = 8.01.471 | No fix listed |
| symantec norton antivirus | = 9.0 | No fix listed |
| symantec norton antivirus | = 2004 | No fix listed |
| symantec norton internet security | = 2004 | No fix listed |
| symantec norton system works | = 2004 | No fix listed |
| symantec sav filter domino nt ports | = build3.0.5 | No fix listed |
| symantec sav filter for domino nt | = 3.1.1 | No fix listed |
| symantec web security | = 3.01.59 | No fix listed |
| symantec web security | = 3.01.60 | No fix listed |
| symantec web security | = 3.01.61 | No fix listed |
| symantec web security | = 3.01.62 | No fix listed |
| symantec web security | = 3.01.63 | No fix listed |
| symantec web security | = 3.01.67 | No fix listed |
| symantec web security | = 3.01.68 | No fix listed |
References
- 1013133 third-party-advisory vdb-entry
- VU#107822 patch third-party-advisory us-government-resource
- www.symantec.com patch vendor-advisory
- 20050208 Symantec AntiVirus Library Heap Overflow patch third-party-advisory vendor-advisory
- upx-engine-gain-control(18869) vdb-entry