PT-2007-5037 · Symantec · Symantec+1

Publicado 2007-07-16 · Atualizado 2008-09-11 · CVE-2007-3802

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Symantec products (affected versions not specified)

Description: The issue is related to the Decomposer component in Symantec products, which may allow remote attackers to execute arbitrary code via certain CAB archives. This is due to improper bounds checks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2007-3802

Produtos afetados

Symantec

Symantec Antivirus Corporate Edition

Referências · 4

• http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html · Nota
• http://frsirt.com/english/advisories/2007/2508 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3802 · Nota de Segurança
• http://securityfocus.com/bid/24282 · Nota