CVE-2007-0564 The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file.
MediumCVSS 4.0
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec web security | <= 3.0.1.72 | No fix listed |
| symantec web security | = 3.01.59 | No fix listed |
| symantec web security | = 3.01.60 | No fix listed |
| symantec web security | = 3.01.61 | No fix listed |
| symantec web security | = 3.01.62 | No fix listed |
| symantec web security | = 3.01.63 | No fix listed |
| symantec web security | = 3.01.67 | No fix listed |
| symantec web security | = 3.01.68 | No fix listed |
References
- 23896 patch third-party-advisory vendor-advisory
- securityresponse.symantec.com patch
- 1017558 vdb-entry
- ADV-2007-0330 vdb-entry