PT-2002-2498 · Symantec+1 · Symantec Norton Antivirus+1

Published

2002-12-31

·

Updated

2024-08-08

·

CVE-2002-1776

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Symantec Norton AntiVirus version 2002
Description The issue allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. However, the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
Recommendations For Symantec Norton AntiVirus version 2002, consider updating the Office plug-in to ensure detection of viruses before execution, as the initial scan may be bypassed. Additionally, be cautious when handling files with .nch or .dbx extensions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1776

Affected Products

Office
Symantec Norton Antivirus