PT-2004-1518 · Symantec · Norton Internet Security

Mark Litchfield · Published 2004-03-23 · Updated 2017-07-11 · CVE-2004-0364

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 2004

Description The issue concerns the WrapNISUM ActiveX component, specifically the WrapUM.dll file, which is marked as safe for scripting. This marking allows remote attackers to execute arbitrary programs by utilizing the LaunchURL method.

Recommendations For Norton Internet Security version 2004, consider disabling the WrapUM.dll file or restricting its use to prevent exploitation until a fix is available.

Fix

Related Identifiers

CVE-2004-0364

Affected Products

Norton Internet Security

References · 9

• http://nextgenss.com/advisories/nisrce.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0364 · Security Note
• http://securityfocus.com/bid/9915 · Vendor Advisory
• http://secunia.com/advisories/11168 · Note
• http://marc.info/?l=bugtraq&m=107970885922442&w=2 · Note
• http://marc.info/?l=bugtraq&m=107980262324362&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15538 · Note
• http://sarc.com/avcenter/security/Content/2004.03.19.html · Note
• http://kb.cert.org/vuls/id/549054 · Note