CVE-2007-1689 Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments....
HighCVSS 10.0
EPSS 65.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton internet security | = 2004 | No fix listed |
| symantec norton personal firewall | = 2004 | No fix listed |
References
- 36164 vdb-entry
- 25290 third-party-advisory vendor-advisory
- VU#983953 third-party-advisory us-government-resource
- 20070516 Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability mailing-list
- 23936 vdb-entry
- 1018073 vdb-entry
- www.symantec.com patch vendor-advisory
- ADV-2007-1843 vdb-entry
- symantec-islalert-bo(34328) vdb-entry