Norton Internet Security (Symantec) - vulnerabilities (CVEs)

40 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2020-01-09. Vendor: Symantec.

CVEs of Norton Internet Security

• CVE-2016-5311 - CVSS 7.8 (high), 2020-01-09: A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton…
• CVE-2016-3646 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
• CVE-2016-3645 - CVSS 9.8 (critical), 2016-06-30: Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server…
• CVE-2016-3644 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
• CVE-2016-2211 - CVSS 7.8 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
• CVE-2016-2210 - CVSS 7.3 (high), 2016-06-30: Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S)…
• CVE-2016-2209 - CVSS 7.3 (high), 2016-06-30: Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S)…
• CVE-2016-2207 - CVSS 8.4 (high), 2016-06-30: The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
• CVE-2010-0107 - CVSS 9.3 (critical), 2010-02-23: Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006…
• CVE-2009-3104 - CVSS 4.3 (medium), 2009-09-08: Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before…
• CVE-2009-1428 - CVSS 4.3 (medium), 2009-04-29: Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec…
• CVE-2008-0313 - CVSS 6.8 (medium), 2008-04-08: The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products…
• CVE-2008-0312 - CVSS 9.3 (critical), 2008-04-08: Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360…
• CVE-2007-5829 - CVSS 6 (medium), 2007-11-05: The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for…
• CVE-2007-3699 - CVSS 9.3 (critical), 2007-10-05: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the…
• CVE-2007-0447 - CVSS 9.3 (critical), 2007-10-05: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted…
• CVE-2007-5047 - CVSS 7.2 (high), 2007-09-24: Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which…
• CVE-2007-2955 - CVSS 6.8 (medium), 2007-08-09: Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet…
• CVE-2007-3673 - CVSS 6.9 (medium), 2007-07-15: Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam…
• CVE-2007-1689 - CVSS 10 (critical), 2007-05-16: Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to…
• CVE-2006-3456 - CVSS 8.5 (high), 2007-05-11: The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System…
• CVE-2007-1793 - CVSS 4.9 (medium), 2007-04-02: SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function…
• CVE-2007-1476 - CVSS 1.9 (low), 2007-03-16: The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate…
• CVE-2006-6490 - CVSS 10 (critical), 2007-02-22: Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated…
• CVE-2006-5404 - CVSS 2.6 (low), 2006-10-19: Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works…
• CVE-2006-5403 - CVSS 5.1 (medium), 2006-10-19: Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System…
• CVE-2006-4855 - CVSS 4.9 (medium), 2006-09-19: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus,…
• CVE-2006-1836 - CVSS 6.8 (medium), 2006-04-19: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which…
• CVE-2005-0923 - CVSS 2.1 (low), 2005-05-02: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
• CVE-2005-0922 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
• CVE-2005-1346 - CVSS 2.6 (low), 2005-05-02: Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus…
• CVE-2005-0249 - CVSS 7.5 (high), 2005-02-08: Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file…
• CVE-2004-0375 - CVSS 5 (medium), 2004-08-18: SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security…
• CVE-2004-0445 - CVSS 2.6 (low), 2004-07-07: The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam…
• CVE-2004-0444 - CVSS 10 (critical), 2004-07-07: Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004,…
• CVE-2004-0364 - CVSS 7.5 (high), 2004-04-15: The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary…
• CVE-2003-0994 - CVSS 7.2 (high), 2004-02-03: The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004,…
• CVE-2003-1149 - CVSS 4.3 (medium), 2003-10-27: Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via…
• CVE-2002-1695 - CVSS 5 (medium), 2002-12-31: Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file…
• CVE-2002-0663 - CVSS 7.5 (high), 2002-07-26: Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a…