PT-2008-1952 · Symantec · Symantec System Works+3

Published 2008-04-08 · Updated 2017-08-08 · CVE-2008-0312

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Norton 360 version 1.0 Symantec AntiVirus versions 2006 through 2008 Symantec Internet Security versions 2006 through 2008 Symantec System Works versions 2006 through 2008

Description The issue is a stack-based buffer overflow in the AutoFix Support Tool ActiveX control. This allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.

Recommendations For Symantec Norton 360 version 1.0, update to a newer version to mitigate the risk. For Symantec AntiVirus versions 2006 through 2008, consider disabling the AutoFix Support Tool ActiveX control until a patch is available. For Symantec Internet Security versions 2006 through 2008, restrict access to the GetEventLogInfo method to minimize the risk of exploitation. For Symantec System Works versions 2006 through 2008, avoid using the AutoFix Support Tool ActiveX control until the issue is resolved.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0312

Affected Products

Symantec Antivirus

Symantec Internet Security

Symantec Norton 360

Symantec System Works

References · 10

• http://secunia.com/advisories/29660 · Vendor Advisory
• http://securitytracker.com/id?1019752 · Patch
• http://securitytracker.com/id?1019751 · Patch
• http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html · Patch
• http://securityfocus.com/bid/28507 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-0312 · Security Note
• http://securitytracker.com/id?1019753 · Patch
• http://vupen.com/english/advisories/2008/1077/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41629 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677 · Note