7.5

CVE-2005-0249

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Antivirus Scan Engine Version < 4.3.3
Symantec ≫ Brightmail Antispam Version4.0
Symantec ≫ Brightmail Antispam Version5.5
Symantec ≫ Client Security Version1.0.1_build_8.01.434 Updatemr3
Symantec ≫ Client Security Version1.0.1_build_8.01.437
Symantec ≫ Client Security Version1.0.1_build_8.01.446 Updatemr4
Symantec ≫ Client Security Version1.0.1_build_8.01.457 Updatemr5
Symantec ≫ Client Security Version1.0.1_build_8.01.460 Updatemr6
Symantec ≫ Client Security Version1.0.1_build_8.01.464 Updatemr7
Symantec ≫ Client Security Version1.0.1_build_8.01.471 Updatemr8
Symantec ≫ Client Security Version1.1.1_mr1_build_8.1.1.314a
Symantec ≫ Client Security Version1.1.1_mr2_build_8.1.1.319
Symantec ≫ Client Security Version1.1.1_mr3_build_8.1.1.323
Symantec ≫ Client Security Version1.1.1_mr4_build_8.1.1.329
Symantec ≫ Client Security Version1.1.1_mr5_build_8.1.1.336
Symantec ≫ Gateway Security Version1.0
Symantec ≫ Gateway Security Version2.0
Symantec ≫ Gateway Security Version2.0.1
Symantec ≫ Mail Security Version4.0 Editiondomino
Symantec ≫ Mail Security Version4.1 Updatebuild_458 Editionexchange
Symantec ≫ Mail Security Version4.1 Updatebuild_459 Editionexchange
Symantec ≫ Mail Security Version4.1 Updatebuild_461 Editionexchange
Symantec ≫ Mail Security Version4.5_build_719 Editionexchange
Symantec ≫ Norton Antivirus Version2.18_build_83 Editionexchange
Symantec ≫ Norton Antivirus Version8.1.1.319 Editioncorporate
Symantec ≫ Norton Antivirus Version8.1.1.323 Editioncorporate
Symantec ≫ Norton Antivirus Version8.1.1.329 Editioncorporate
Symantec ≫ Norton Antivirus Version8.1.1_build8.1.1.314a Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.434 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.437 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.446 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.457 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.460 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.464 Editioncorporate
Symantec ≫ Norton Antivirus Version8.01.471 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0 Editionmacintosh_corporate
Symantec ≫ Norton Antivirus Version2004 Editionwindows
Symantec ≫ Norton Internet Security Version2004 Editionprofessional
Symantec ≫ Norton System Works Version2004 Editionwindows
Symantec ≫ Sav Filter Domino Nt Ports Versionbuild3.0.5 Editionaix
Symantec ≫ Sav Filter Domino Nt Ports Versionbuild3.0.5 Editionos_400
Symantec ≫ Web Security Version3.01.59
Symantec ≫ Web Security Version3.01.60
Symantec ≫ Web Security Version3.01.61
Symantec ≫ Web Security Version3.01.62
Symantec ≫ Web Security Version3.01.63
Symantec ≫ Web Security Version3.01.67
Symantec ≫ Web Security Version3.01.68
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 10.6% 0.925
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
http://securitytracker.com/id?1013133
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/107822
Patch
Third Party Advisory
US Government Resource