PT-2007-2673 · Symantec · Symantec Mail Security For Smtp

Published 2007-03-03 · Updated 2017-07-29 · CVE-2007-1252

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Mail Security for SMTP version 5.0 before Patch 175

Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted headers in an e-mail message.

Recommendations For Symantec Mail Security for SMTP version 5.0, apply Patch 175 to resolve the issue.

Fix

Related Identifiers

CVE-2007-1252

Affected Products

Symantec Mail Security For Smtp

References · 9

• http://kb.cert.org/vuls/id/875633 · Patch
• http://securityfocus.com/bid/22782 · Vendor Advisory
• http://secunia.com/advisories/24371 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1252 · Security Note
• ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0_smtp/updates/release_notes_p175.txt · Note
• http://osvdb.org/33840 · Note
• http://securitytracker.com/id?1017716 · Note
• http://vupen.com/english/advisories/2007/0799 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32781 · Note