PT-2002-2499 · Symantec+1 · Symantec Norton Antivirus+1

Published 2002-12-31 · Updated 2024-08-08 · CVE-2002-1777

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Norton AntiVirus (NAV) version 2002

Description The issue allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name. The vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Symantec Norton AntiVirus or the Office plug-in would detect the virus before it is executed.

Recommendations For Symantec Norton AntiVirus (NAV) version 2002, consider restricting the use of excluded extensions in the Content-Type field to minimize the risk of exploitation. Additionally, ensure that the Office plug-in is enabled to detect viruses before they are executed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1777

Affected Products

Outlook

Symantec Norton Antivirus

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2002-1777 · Security Note
• https://t.me/cvenotify/80122 · Telegram Post
• http://online.securityfocus.com/archive/1/260678 · Note
• https://t.me/cvenotify/76352 · Telegram Post
• https://t.me/cvenotify/89867 · Telegram Post
• http://securityfocus.com/bid/4246 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8392 · Note
• http://online.securityfocus.com/archive/1/260271 · Note