PT-2008-6544 · Symantec · Norton Internet Security

Bernhard Brehm + 1 · Published 2008-12-11 · Updated 2018-10-11 · CVE-2008-5427

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Norton Internet Security version 15.5.0.23

Description The issue is related to how Norton Antivirus handles certain email messages. Specifically, it does not properly handle multipart/mixed email messages with many MIME parts and possibly email messages with many "Content-type: message/rfc822;" headers. This can be exploited by remote attackers to cause a denial of service through stack consumption or other resource consumption by sending a large email message.

Recommendations For Norton Internet Security version 15.5.0.23, update to a newer version that addresses this issue to prevent potential denial of service attacks.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2008-5427

Affected Products

Norton Internet Security

References · 5

• 🔥 http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-5427 · Security Note
• http://securityreason.com/securityalert/4721 · Note
• http://securityfocus.com/archive/1/499045/100/0/threaded · Note
• http://securityfocus.com/archive/1/499038/100/0/threaded · Note