PT-2007-4314 · Symantec · Symantec Antivirus Corporate Edition+2

Publicado 2007-06-05 · Atualizado 2017-07-29 · CVE-2007-3021

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Symantec Reporting Server versions 1.0.197.0 through 1.0.223.0 Symantec Client Security versions 3.1 and later (affected versions not specified) Symantec AntiVirus Corporate Edition (SAV CE) versions 10.1 and later (affected versions not specified)

Description: The issue allows attackers to create arbitrary executable files via unknown manipulations of a file created during data export, due to the failure to initialize a critical variable.

Recommendations: For Symantec Reporting Server versions 1.0.197.0 through 1.0.223.0, update to version 1.0.224.0 or later. For Symantec Client Security and Symantec AntiVirus Corporate Edition, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3021

Produtos afetados

Symantec Antivirus Corporate Edition

Symantec Client Security

Symantec Reporting Server

Referências · 9

• http://vupen.com/english/advisories/2007/2074 · Nota
• http://securityfocus.com/bid/24313 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3021 · Nota de Segurança
• http://securitytracker.com/id?1018196 · Nota
• http://secunia.com/advisories/25543 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3021 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34744 · Nota
• http://symantec.com/avcenter/security/Content/2007.06.05a.html · Aviso do Fabricante
• http://osvdb.org/36109 · Nota