Norton Antivirus (Symantec) - vulnerabilities (CVEs)

67 CVEs, 0 in the last 30 days, 194 known versions, newest CVE from 2020-01-09. Vendor: Symantec.

CVEs of Norton Antivirus

CVE-2016-5311 - CVSS 7.8 (high), 2020-01-09: A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton…
CVE-2018-12238 - CVSS 7.8 (high), 2018-11-29: Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior…
CVE-2018-12239 - CVSS 6.8 (medium), 2018-11-29: Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior…
CVE-2016-3646 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-3645 - CVSS 9.8 (critical), 2016-06-30: Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server…
CVE-2016-3644 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2211 - CVSS 7.8 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2210 - CVSS 7.3 (high), 2016-06-30: Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S)…
CVE-2016-2209 - CVSS 7.3 (high), 2016-06-30: Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S)…
CVE-2016-2207 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2010-3497 - CVSS 6.4 (medium), 2012-08-22: Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier…
CVE-2010-0107 - CVSS 9.3 (critical), 2010-02-23: Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006…
CVE-2009-3104 - CVSS 4.3 (medium), 2009-09-08: Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before…
CVE-2008-0313 - CVSS 6.8 (medium), 2008-04-08: The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products…
CVE-2008-0312 - CVSS 9.3 (critical), 2008-04-08: Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360…
CVE-2007-5829 - CVSS 6 (medium), 2007-11-05: The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for…
CVE-2007-3699 - CVSS 9.3 (critical), 2007-10-05: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the…
CVE-2007-0447 - CVSS 9.3 (critical), 2007-10-05: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted…
CVE-2007-2955 - CVSS 6.8 (medium), 2007-08-09: Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet…
CVE-2007-3800 - CVSS 6 (medium), 2007-07-16: Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0…
CVE-2007-3771 - CVSS 4.6 (medium), 2007-07-15: Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1,…
CVE-2007-3673 - CVSS 6.9 (medium), 2007-07-15: Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam…
CVE-2007-3095 - CVSS 9 (critical), 2007-06-06: Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and…
CVE-2007-3021 - CVSS 7.5 (high), 2007-06-05: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate…
CVE-2007-3022 - CVSS 4.3 (medium), 2007-06-05: Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate…
CVE-2006-3456 - CVSS 8.5 (high), 2007-05-11: The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System…
CVE-2007-1793 - CVSS 4.9 (medium), 2007-04-02: SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function…
CVE-2007-1476 - CVSS 1.9 (low), 2007-03-16: The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate…
CVE-2006-6490 - CVSS 10 (critical), 2007-02-22: Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated…
CVE-2006-3455 - CVSS 4.3 (medium), 2006-10-23: The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to…
CVE-2006-5403 - CVSS 5.1 (medium), 2006-10-19: Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System…
CVE-2006-5404 - CVSS 2.6 (low), 2006-10-19: Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works…
CVE-2006-4855 - CVSS 4.9 (medium), 2006-09-19: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus,…
CVE-2006-4802 - CVSS 4.6 (medium), 2006-09-14: Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0,…
CVE-2006-3454 - CVSS 7.2 (high), 2006-09-14: Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute…
CVE-2006-2630 - CVSS 10 (critical), 2006-05-27: Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.
CVE-2006-1836 - CVSS 6.8 (medium), 2006-04-19: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which…
CVE-2005-3270 - CVSS 7.2 (high), 2005-10-21: Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to…
CVE-2005-2759 - CVSS 7.2 (high), 2005-10-20: ** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local…
CVE-2005-2766 - CVSS 2.1 (low), 2005-09-02: Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores…
CVE-2005-2017 - CVSS 10 (critical), 2005-08-30: Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised…
CVE-2005-1346 - CVSS 2.6 (low), 2005-05-02: Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus…
CVE-2005-0923 - CVSS 2.1 (low), 2005-05-02: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
CVE-2005-0922 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
CVE-2005-0249 - CVSS 7.5 (high), 2005-02-08: Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file…
CVE-2004-2147 - CVSS 5 (medium), 2004-12-31: Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1)…
CVE-2004-0920 - CVSS 5 (medium), 2004-11-03: Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application…
CVE-2004-0487 - CVSS 10 (critical), 2004-08-18: A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute…
CVE-2004-0683 - CVSS 5 (medium), 2004-08-06: Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large…
CVE-2003-0994 - CVSS 7.2 (high), 2004-02-03: The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004,…
CVE-2003-1451 - CVSS 6.4 (medium), 2003-12-31: Buffer overflow in Symantec Norton AntiVirus 2002 allows remote attackers to execute arbitrary code via an e-mail attachment with a compressed ZIP file that…
CVE-2003-1310 - CVSS 4.6 (medium), 2003-12-31: The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting…
CVE-2002-1540 - CVSS 7.2 (high), 2003-03-31: The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges,…
CVE-2002-1775 - CVSS 7.5 (high), 2002-12-31: NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV…
CVE-2002-2206 - CVSS 7.8 (high), 2002-12-31: The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username…
CVE-2002-1774 - CVSS 7.5 (high), 2002-12-31: NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a…
CVE-2002-1777 - CVSS 7.5 (high), 2002-12-31: NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the…
CVE-2002-1776 - CVSS 7.5 (high), 2002-12-31: NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus…
CVE-2002-0485 - CVSS 7.5 (high), 2002-08-12: Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper…
CVE-2001-1099 - CVSS 5 (medium), 2001-09-07: The default configuration of Norton AntiVirus for Microsoft Exchange 2000 2.x allows remote attackers to identify the recipient's INBOX file path by sending…
CVE-2000-0793 - CVSS 10 (critical), 2000-10-20: Norton AntiVirus 5.00.01C with the Novell Netware client does not properly restart the auto-protection service after the first user has logged off of the…
CVE-2000-0478 - CVSS 5 (medium), 2000-06-14: In some cases, Norton Antivirus for Exchange (NavExchange) enters a "fail-open" state which allows viruses to pass through the server.
CVE-2000-0477 - CVSS 5 (medium), 2000-06-14: Buffer overflow in Norton Antivirus for Exchange (NavExchange) allows remote attackers to cause a denial of service via a .zip file that contains long file…
CVE-2000-0238 - CVSS 5 (medium), 2000-03-17: Buffer overflow in the web server for Norton AntiVirus for Internet Email Gateways allows remote attackers to cause a denial of service via a long URL.
CVE-2000-0119 - CVSS 7.2 (high), 1999-12-22: The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED folder that is used by the Windows…
CVE-1999-1004 - CVSS 5 (medium), 1999-12-16: Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.
CVE-1999-1323 - CVSS 4.6 (medium), 1999-04-09: Norton AntiVirus for Internet Email Gateways (NAVIEG) 1.0.1.7 and earlier, and Norton AntiVirus for MS Exchange (NAVMSE) 1.5 and earlier, store the…