CVE-2007-0447
Published Oct 5, 2007Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Vendor/product archive
symantec / web_security CVEs
Beta · best-effort7 CVEs tagged to symantec / web_security — 2 Critical, 1 High, 3 Medium, 1 Low, 0 Unrated.
CVE-2007-3699
Published Oct 5, 2007The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR arc…
CVE-2007-0563
Published Jan 30, 2007Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified ve…
CVE-2007-0564
Published Jan 30, 2007The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file.
CVE-2005-1346
Published May 2, 2005Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,…
CVE-2005-0249
Published Feb 8, 2005Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative v…
CVE-2004-2755
Published Dec 31, 2004Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the quer…
Showing 1-7 of 7 CVEsPage 1 of 1