PT-2007-5037 · Symantec · Symantec+1

Published 2007-07-16 · Updated 2008-09-11 · CVE-2007-3802

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions: Symantec products (affected versions not specified)

Description: The issue is related to the Decomposer component in Symantec products, which may allow remote attackers to execute arbitrary code via certain CAB archives. This is due to improper bounds checks.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-3802

Affected Products

Symantec

Symantec Antivirus Corporate Edition

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3802 · Security Note
• http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html · Note
• http://frsirt.com/english/advisories/2007/2508 · Note
• http://securityfocus.com/bid/24282 · Note