CVE-2005-1346 Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino...
LowCVSS 2.6
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus scan engine | = 4.3.7.27 | No fix listed |
| symantec mail security | = 4.0.5.66 | No fix listed |
| symantec mail security | = 4.5.4.743 | No fix listed |
| symantec norton antivirus | = 2005_11.0.0 | No fix listed |
| symantec norton internet security | = 2005_contains_nav_11.0.0 | No fix listed |
| symantec norton system works | = 2005_contains_nav_11.0.0 | No fix listed |
| symantec symav filter domino nt | = 3.1.1.87 | No fix listed |
| symantec web security | = 3.0.1.72 | No fix listed |
References
- securityresponse.symantec.com vendor-advisory