PT-2004-1518 · Symantec · Norton Internet Security

Mark Litchfield · Publicado 2004-03-23 · Atualizado 2017-07-11 · CVE-2004-0364

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 2004

Description The issue concerns the WrapNISUM ActiveX component, specifically the WrapUM.dll file, which is marked as safe for scripting. This marking allows remote attackers to execute arbitrary programs by utilizing the LaunchURL method.

Recommendations For Norton Internet Security version 2004, consider disabling the WrapUM.dll file or restricting its use to prevent exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-2004-0364

Produtos afetados

Norton Internet Security

Referências · 9

• http://secunia.com/advisories/11168 · Nota
• http://marc.info/?l=bugtraq&m=107970885922442&w=2 · Nota
• http://marc.info/?l=bugtraq&m=107980262324362&w=2 · Nota
• http://nextgenss.com/advisories/nisrce.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0364 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15538 · Nota
• http://securityfocus.com/bid/9915 · Aviso do Fabricante
• http://sarc.com/avcenter/security/Content/2004.03.19.html · Nota
• http://kb.cert.org/vuls/id/549054 · Nota