PT-2002-2496 · Symantec · Symantec Norton Antivirus

Published 2002-12-31 · Updated 2024-08-08 · CVE-2002-1774

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Norton AntiVirus version 2002

Description The issue allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. However, the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.

Recommendations For Symantec Norton AntiVirus version 2002, consider configuring the AutoProtect feature to enhance detection capabilities, as it may detect the virus before execution, despite the initial scan being bypassed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1774

Affected Products

Symantec Norton Antivirus

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-1774 · Security Note
• https://t.me/cvenotify/76349 · Telegram Post
• http://online.securityfocus.com/archive/1/260678 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8389 · Note
• http://securityfocus.com/bid/4242 · Note
• https://t.me/cvenotify/89864 · Telegram Post
• https://t.me/cvenotify/80119 · Telegram Post
• http://online.securityfocus.com/archive/1/260271 · Note