PT-2008-6544 · Symantec · Norton Internet Security

Bernhard Brehm + 1 · Publicado 2008-12-11 · Atualizado 2018-10-11 · CVE-2008-5427

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 15.5.0.23

Description The issue is related to how Norton Antivirus handles certain email messages. Specifically, it does not properly handle multipart/mixed email messages with many MIME parts and possibly email messages with many "Content-type: message/rfc822;" headers. This can be exploited by remote attackers to cause a denial of service through stack consumption or other resource consumption by sending a large email message.

Recommendations For Norton Internet Security version 15.5.0.23, update to a newer version that addresses this issue to prevent potential denial of service attacks.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2008-5427

Produtos afetados

Norton Internet Security

Referências · 5

• 🔥 http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro · Exploit
• http://securityreason.com/securityalert/4721 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5427 · Nota de Segurança
• http://securityfocus.com/archive/1/499045/100/0/threaded · Nota
• http://securityfocus.com/archive/1/499038/100/0/threaded · Nota