PT-2003-1273 · Symantec+1 · Symantec Antivirus Corporate Edition+1

Published 2003-03-31 · Updated 2008-09-10 · CVE-2002-1540

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Norton AntiVirus Corporate Edition versions 7.5.x through 7.5.1 Build 61 Symantec Norton AntiVirus Corporate Edition versions 7.6.x through 7.6.1 Build 34

Description The issue allows local users to gain privileges by utilizing certain features of winhlp32, which is run with raised privileges by the client.

Recommendations For Symantec Norton AntiVirus Corporate Edition versions 7.5.x through 7.5.1 Build 61, update to Build 62 or later. For Symantec Norton AntiVirus Corporate Edition versions 7.6.x through 7.6.1 Build 34, update to Build 35a or later.

Fix

Related Identifiers

CVE-2002-1540

Affected Products

Symantec Antivirus Corporate Edition

Winhlp32

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1540 · Security Note
• http://iss.net/security_center/static/10475.php · Vendor Advisory
• http://osvdb.org/6258 · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0369.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-10/0346.html · Note