PT-2007-4252 · Symantec · System Works+2

Publicado

2007-08-09

·

Atualizado

2017-07-29

·

CVE-2007-2955

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Norton AntiVirus, Internet Security, and System Works products for 2006
Description The issue is related to input validation errors in multiple ActiveX controls in NavComUI.dll. This allows remote attackers to execute arbitrary code via the AnomalyList property to AxSysListView32 and the Anomaly property to AxSysListView32OAA.
Recommendations For Norton AntiVirus, Internet Security, and System Works products for 2006, consider disabling the ActiveX controls in NavComUI.dll as a temporary workaround until a patch is available. Restrict access to the AxSysListView32 and AxSysListView32OAA components to minimize the risk of exploitation. Avoid using the AnomalyList and Anomaly properties in the affected ActiveX controls until the issue is resolved.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2007-2955

Produtos afetados

Internet Security
Norton Antivirus
System Works