Norton System Works (Symantec) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2008-04-08. Vendor: Symantec.
CVEs of Norton System Works
- CVE-2008-0312 - CVSS 9.3 (critical), 2008-04-08: Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360…
- CVE-2007-3699 - CVSS 9.3 (critical), 2007-10-05: The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the…
- CVE-2007-0447 - CVSS 9.3 (critical), 2007-10-05: Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted…
- CVE-2007-2955 - CVSS 6.8 (medium), 2007-08-09: Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet…
- CVE-2007-3673 - CVSS 6.9 (medium), 2007-07-15: Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam…
- CVE-2006-3456 - CVSS 8.5 (high), 2007-05-11: The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System…
- CVE-2007-1793 - CVSS 4.9 (medium), 2007-04-02: SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function…
- CVE-2007-1476 - CVSS 1.9 (low), 2007-03-16: The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate…
- CVE-2006-6490 - CVSS 10 (critical), 2007-02-22: Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated…
- CVE-2006-5403 - CVSS 5.1 (medium), 2006-10-19: Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System…
- CVE-2006-5404 - CVSS 2.6 (low), 2006-10-19: Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works…
- CVE-2006-4855 - CVSS 4.9 (medium), 2006-09-19: The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus,…
- CVE-2006-1836 - CVSS 6.8 (medium), 2006-04-19: Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which…
- CVE-2006-0166 - CVSS 7.5 (high), 2006-01-11: Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory,…
- CVE-2005-0922 - CVSS 5 (medium), 2005-05-02: Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
- CVE-2005-1346 - CVSS 2.6 (low), 2005-05-02: Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus…
- CVE-2005-0923 - CVSS 2.1 (low), 2005-05-02: The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works…
- CVE-2005-0249 - CVSS 7.5 (high), 2005-02-08: Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file…
- CVE-2003-0994 - CVSS 7.2 (high), 2004-02-03: The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004,…
