CVE-2007-0447 Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
HighCVSS 9.3
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus scan engine | = 4.0 | No fix listed |
| symantec antivirus scan engine | = 4.1 | No fix listed |
| symantec antivirus scan engine | = 4.1.8 | No fix listed |
| symantec antivirus scan engine | = 4.3 | No fix listed |
| symantec antivirus scan engine | = 4.3.3 | No fix listed |
| symantec antivirus scan engine | = 4.3.7.27 | No fix listed |
| symantec antivirus scan engine | = 4.3.8.29 | No fix listed |
| symantec antivirus scan engine | = 4.3.12 | No fix listed |
| symantec antivirus scan engine | = 5.0 | No fix listed |
| symantec antivirus scan engine | = 5.0.1 | No fix listed |
| symantec brightmail antispam | = 4.0 | No fix listed |
| symantec brightmail antispam | = 5.5 | No fix listed |
| symantec brightmail antispam | = 6.0 | No fix listed |
| symantec brightmail antispam | = 6.0.1 | No fix listed |
| symantec brightmail antispam | = 6.0.2 | No fix listed |
| symantec brightmail antispam | = 6.0.3 | No fix listed |
| symantec brightmail antispam | = 6.0.4 | No fix listed |
| symantec client security | = 2.0 | No fix listed |
| symantec client security | = 2.0-build_9.0.0.338 | No fix listed |
| symantec client security | = 2.0.1_build_9.0.1.1000-mr1 | No fix listed |
| symantec client security | = 2.0.2_build_9.0.2.1000-mr2 | No fix listed |
| symantec client security | = 2.0.3_build_9.0.3.1000-mr3 | No fix listed |
| symantec client security | = 2.0.4 | No fix listed |
| symantec client security | = 2.0.4-mr4_build1000 | No fix listed |
| symantec client security | = 2.0.5_build_1100_mp1-mr5 | No fix listed |
Show 122 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 2.0.6-mr6 | No fix listed |
| symantec client security | = 3.0 | No fix listed |
| symantec client security | = 3.0.0.359 | No fix listed |
| symantec client security | = 3.0.1.1000 | No fix listed |
| symantec client security | = 3.0.1.1001 | No fix listed |
| symantec client security | = 3.0.1.1007 | No fix listed |
| symantec client security | = 3.0.1.1008 | No fix listed |
| symantec client security | = 3.0.2.2000 | No fix listed |
| symantec client security | = 3.0.2.2001 | No fix listed |
| symantec client security | = 3.0.2.2002 | No fix listed |
| symantec client security | = 3.0.2.2010 | No fix listed |
| symantec client security | = 3.0.2.2011 | No fix listed |
| symantec client security | = 3.0.2.2020 | No fix listed |
| symantec client security | = 3.0.2.2021 | No fix listed |
| symantec client security | = 3.1 | No fix listed |
| symantec client security | = 3.1.394 | No fix listed |
| symantec client security | = 3.1.396 | No fix listed |
| symantec client security | = 3.1.400 | No fix listed |
| symantec client security | = 3.1.401 | No fix listed |
| symantec mail security | = 4.0 | No fix listed |
| symantec mail security | = 4.0-build456 | No fix listed |
| symantec mail security | = 4.0-build463 | No fix listed |
| symantec mail security | = 4.0-build465 | No fix listed |
| symantec mail security | = 4.0-build736 | No fix listed |
| symantec mail security | = 4.0-build741 | No fix listed |
| symantec mail security | = 4.0-build743 | No fix listed |
| symantec mail security | = 4.0.1 | No fix listed |
| symantec mail security | = 4.1-build458 | No fix listed |
| symantec mail security | = 4.1-build459 | No fix listed |
| symantec mail security | = 4.1-build461 | No fix listed |
| symantec mail security | = 4.5 | No fix listed |
| symantec mail security | = 4.5.4.743 | No fix listed |
| symantec mail security | = 4.5_build_719 | No fix listed |
| symantec mail security | = 4.5_build_736 | No fix listed |
| symantec mail security | = 4.5_build_741 | No fix listed |
| symantec mail security | = 4.6.1.107 | No fix listed |
| symantec mail security | = 4.6.3 | No fix listed |
| symantec mail security | = 4.6_build_97 | No fix listed |
| symantec mail security | = 5.0 | No fix listed |
| symantec mail security | = 5.0.0.204 | No fix listed |
| symantec mail security | = 5.0.1 | No fix listed |
| symantec mail security | = 5.1.0 | No fix listed |
| symantec mail security | = 6.0.0 | No fix listed |
| symantec norton antivirus | All versions | No fix listed |
| symantec norton antivirus | = 9.0 | No fix listed |
| symantec norton antivirus | = 9.0.0 | No fix listed |
| symantec norton antivirus | = 9.0.0.338 | No fix listed |
| symantec norton antivirus | = 9.0.1 | No fix listed |
| symantec norton antivirus | = 9.0.1.1.1000 | No fix listed |
| symantec norton antivirus | = 9.0.2 | No fix listed |
| symantec norton antivirus | = 9.0.2.1000 | No fix listed |
| symantec norton antivirus | = 9.0.3 | No fix listed |
| symantec norton antivirus | = 9.0.3.1000 | No fix listed |
| symantec norton antivirus | = 9.0.4 | No fix listed |
| symantec norton antivirus | = 9.0.4-mr4_build_1000 | No fix listed |
| symantec norton antivirus | = 9.0.5 | No fix listed |
| symantec norton antivirus | = 9.0.5.1100 | No fix listed |
| symantec norton antivirus | = 9.0.6.1000 | No fix listed |
| symantec norton antivirus | = 10.0 | No fix listed |
| symantec norton antivirus | = 10.0.0 | No fix listed |
| symantec norton antivirus | = 10.0.0.359 | No fix listed |
| symantec norton antivirus | = 10.0.1 | No fix listed |
| symantec norton antivirus | = 10.0.1.1000 | No fix listed |
| symantec norton antivirus | = 10.0.1.1007 | No fix listed |
| symantec norton antivirus | = 10.0.1.1008 | No fix listed |
| symantec norton antivirus | = 10.0.2.2000 | No fix listed |
| symantec norton antivirus | = 10.0.2.2001 | No fix listed |
| symantec norton antivirus | = 10.0.2.2002 | No fix listed |
| symantec norton antivirus | = 10.0.2.2010 | No fix listed |
| symantec norton antivirus | = 10.0.2.2011 | No fix listed |
| symantec norton antivirus | = 10.0.2.2020 | No fix listed |
| symantec norton antivirus | = 10.0.2.2021 | No fix listed |
| symantec norton antivirus | = 10.1 | No fix listed |
| symantec norton antivirus | = 10.1.4 | No fix listed |
| symantec norton antivirus | = 10.1.4-mr4_mp1_build4010 | No fix listed |
| symantec norton antivirus | = 10.1.4.4010 | No fix listed |
| symantec norton antivirus | = 10.1.394 | No fix listed |
| symantec norton antivirus | = 10.1.396 | No fix listed |
| symantec norton antivirus | = 10.1.400 | No fix listed |
| symantec norton antivirus | = 10.1.401 | No fix listed |
| symantec norton antivirus | = 10.9.1 | No fix listed |
| symantec norton antivirus | = 2004 | No fix listed |
| symantec norton antivirus | = 2005 | No fix listed |
| symantec norton antivirus | = 2005-11.0 | No fix listed |
| symantec norton antivirus | = 2005-11.0.9 | No fix listed |
| symantec norton antivirus | = 2006 | No fix listed |
| symantec norton internet security | = 3.0 | No fix listed |
| symantec norton internet security | = 2004 | No fix listed |
| symantec norton internet security | = 2005 | No fix listed |
| symantec norton internet security | = 2005-11.0 | No fix listed |
| symantec norton internet security | = 2005-11.0.9 | No fix listed |
| symantec norton internet security | = 2005-11.5.6.14 | No fix listed |
| symantec norton internet security | = 2006 | No fix listed |
| symantec norton personal firewall | = 2006 | No fix listed |
| symantec norton personal firewall | = 2006_9.1.0.33 | No fix listed |
| symantec norton personal firewall | = 2006_9.1.1.7 | No fix listed |
| symantec norton system works | = 3.0 | No fix listed |
| symantec norton system works | = 2004 | No fix listed |
| symantec norton system works | = 2005 | No fix listed |
| symantec norton system works | = 2005-11.0 | No fix listed |
| symantec norton system works | = 2005-11.0.9 | No fix listed |
| symantec norton system works | = 2006 | No fix listed |
| symantec antivirus filtering +for domino | = 3.0.12 | No fix listed |
| symantec web security | = 2.5 | No fix listed |
| symantec web security | = 3.0 | No fix listed |
| symantec web security | = 3.0.1 | No fix listed |
| symantec web security | = 3.0.1.70 | No fix listed |
| symantec web security | = 3.0.1.76 | No fix listed |
| symantec web security | = 3.0.1_build_3.01.70 | No fix listed |
| symantec web security | = 3.0.1_build_3.01.72 | No fix listed |
| symantec web security | = 3.0.1_build_3.01.74 | No fix listed |
| symantec web security | = 3.01.59 | No fix listed |
| symantec web security | = 3.01.60 | No fix listed |
| symantec web security | = 3.01.61 | No fix listed |
| symantec web security | = 3.01.62 | No fix listed |
| symantec web security | = 3.01.63 | No fix listed |
| symantec web security | = 3.01.67 | No fix listed |
| symantec web security | = 3.01.68 | No fix listed |
| symantec web security | = 5.0 | No fix listed |
| symantec gateway security 5000 series | = 3.0.1 | No fix listed |
| symantec gateway security 5400 | = 2.0.1 | No fix listed |
| symantec mail security 8820 appliance | All versions | No fix listed |
References
- 36118 vdb-entry
- 26053 third-party-advisory vendor-advisory
- securityresponse.symantec.com patch
- 24282 vdb-entry
- ADV-2007-2508 vdb-entry
- www.zerodayinitiative.com