Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

symantec norton antivirus 9.0.1 vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2007-5829
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges b...
Symantec Norton Antivirus 9.0.2Symantec Norton Antivirus 9.0.3Symantec Norton Antivirus 10.1Symantec Norton Antivirus 9.0.1Symantec Norton Antivirus 9.0Symantec Norton Internet Security 3.0Symantec Norton Antivirus 10.0
6.8
CVSSv2
CVE-2006-1836
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 up to and including 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
Symantec Liveupdate 3.0Symantec Liveupdate 3.5Symantec Norton Antivirus 9.0.3Symantec Norton Internet Security 3.0Symantec Liveupdate 3.0.2Symantec Liveupdate 3.0.3Symantec Norton Antivirus 9.0.0Symantec Norton Antivirus 9.0.1Symantec Norton Antivirus 9.0.2Symantec Norton Antivirus 10.0.0Symantec Norton Antivirus 10.0.1Symantec Norton Personal Firewall 3.0Symantec Norton Personal Firewall 3.1Symantec Liveupdate 3.0.1Symantec Norton Antivirus 10.0Symantec Norton Antivirus 10.9.1Symantec Norton System Works 3.0Symantec Norton Utilities 8.0
6.9
CVSSv2
CVE-2007-3673
Symantec symtdi.sys prior to 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 up to and including 10.1 and Client Security 2.0 up to and including 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006;...
Symantec Client Security 2.0Symantec Norton Antivirus 9.0.0.338Symantec Norton Antivirus 9.0.1.1.1000Symantec Norton Antispam 2005Symantec Norton Antivirus 10.0Symantec Norton Antivirus 9.0.2.1000Symantec Norton Antivirus 9.0.2Symantec Norton Internet Security 2006Symantec Norton Personal Firewall 2005Symantec Norton Antivirus 9.0.5.1100Symantec Norton Antivirus 9.0.5Symantec Norton System Works 2006Symantec Client Security 3.0Symantec Client Security 3.1Symantec Norton Antivirus 9.0.1.1000Symantec Norton Antivirus 9.0.1Symantec Norton Antivirus 9.0Symantec Norton Internet Security 2005Symantec Norton Antivirus 10.1Symantec Norton Antivirus 2005Symantec Norton Antivirus 2006Symantec Norton Antivirus 9.0.3.1000
4.6
CVSSv2
CVE-2007-3771
Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition prior to 10.1, and Client Security prior to 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in a...
Symantec Client Security 3.0.1.1007Symantec Client Security 3.0.1.1009Symantec Norton Antivirus 10.0.1.1000Symantec Norton Antivirus 10.0.1.1007Symantec Norton Antivirus 10.0.2.2021Symantec Norton Antivirus 10.0Symantec Norton Antivirus 9.0.4Symantec Norton Antivirus 9.0.5.1100Symantec Client Security 3.0.2Symantec Client Security 3.0.2.2000Symantec Norton Antivirus 10.0.2.2000Symantec Norton Antivirus 10.0.2.2001Symantec Norton Antivirus 9.0.0.338Symantec Norton Antivirus 9.0.1.1.1000Symantec Norton Antivirus 9.0.5Symantec Norton Antivirus 9.0Symantec Client Security 2.0Symantec Client Security 3.0Symantec Client Security 3.0.1.1000Symantec Client Security 3.0.2.2011Symantec Client Security 3.0.2.2021Symantec Norton Antivirus 10.0.2.2011
4.3
CVSSv2
CVE-2006-3455
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOContro...
Symantec Client Security 1.1.1 Mr3 Build 8.1.1.323Symantec Client Security 1.1.1 Mr4 Build 8.1.1.329Symantec Client Security 2.0.2Symantec Client Security 2.0.2 Build 9.0.2.1000Symantec Norton Antivirus 8.01.457Symantec Norton Antivirus 8.01.460Symantec Norton Antivirus 8.1.1.366Symantec Norton Antivirus 8.1.1.377Symantec Norton Antivirus 9.0.1Symantec Norton Antivirus 9.0.2.1000Symantec Client Security 1.1.1Symantec Client Security 1.1.1 Build 393Symantec Client Security 1.1 Stm B8.1.0.825aSymantec Client Security 2.0Symantec Client Security 2.0 Scf 7.1Symantec Client Security 2.0 Stm Build 9.0.0.338Symantec Norton Antivirus 8.01.434Symantec Norton Antivirus 8.1.0.825aSymantec Norton Antivirus 8.1.1.319Symantec Norton Antivirus 8.1.1 Build8.1.1.314aSymantec Norton Antivirus 8.1Symantec Client Security 1.1.1 Mr1 Build 8.1.1.314a
7.2
CVSSv2
CVE-2006-3454
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.
Symantec Client Security 2.0Symantec Client Security 2.0.1Symantec Norton Antivirus 9.0.2Symantec Norton Antivirus 9.0Symantec Client Security 1.0Symantec Client Security 1.0.1Symantec Client Security 2.0.4Symantec Client Security 3.0Symantec Client Security 1.1Symantec Client Security 1.1.1Symantec Norton Antivirus 10.0Symantec Norton Antivirus 8.1Symantec Norton Antivirus 9.0.1Symantec Client Security 2.0.2Symantec Client Security 2.0.3
1.9
CVSSv2
CVE-2007-1476
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and previous versions, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x up to and including 10.1.x, and other Norton products, allows local users to cause a denial of service...
Symantec Norton Antispam 2005Symantec Norton Antivirus 2006Symantec Norton Antivirus 10.0.1.1007Symantec Norton Antivirus 10.0.1.1008Symantec Norton Antivirus 10.0.2.2021Symantec Norton Antivirus 10.0Symantec Norton Antivirus 3.0Symantec Norton Antivirus 9.0.0.338Symantec Norton Antivirus 9.0.4Symantec Norton Antivirus 9.0.5.1100Symantec Client Security 2.0.2Symantec Client Security 2.0.2 Build 9.0.2.1000Symantec Client Security 2.0.6Symantec Client Security 3.0Symantec Client Security 3.0.0.359Symantec Client Security 3.0.2.2000Symantec Client Security 3.0.2.2001Symantec Client Security 3.0.2.2002Symantec Norton Personal FirewallSymantec Norton Personal Firewall 2005Symantec Norton System Works 2006Symantec Norton Antivirus 10.0.2.2002
2.1
CVSSv2
CVE-2005-2766
Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows malicious users to obtain the username and pass...
Symantec Norton Antivirus 9.0.4Symantec Norton Antivirus 9.0.1.1.1000
9.3
CVSSv2
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote malicious users to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Symantec Antivirus Scan Engine 4.0Symantec Antivirus Scan Engine 4.3.12Symantec Antivirus Scan Engine 4.3Symantec Brightmail Antispam 6.0.2Symantec Brightmail Antispam 6.0.3Symantec Client Security 2.0.4Symantec Client Security 2.0.5 Build 1100 Mp1Symantec Client Security 3.0.1.1007Symantec Client Security 3.0.1.1008Symantec Client Security 3.0.2.2021Symantec Client Security 3.1Symantec Mail Security 4.0Symantec Mail Security 4.1Symantec Mail Security 4.5.4.743Symantec Mail Security 4.6 Build 97Symantec Mail Security 5.0.0.204Symantec Norton Antivirus 10.0.0.359Symantec Norton Antivirus 10.0.0Symantec Norton Antivirus 10.0.2.2010Symantec Norton Antivirus 10.0.2.2011Symantec Norton Antivirus 10.1.4.4010Symantec Norton Antivirus 10.1.4
9.3
CVSSv2
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote malicious users to execute arbitrary code via multiple crafted CAB archives.
Symantec Antivirus Scan Engine 4.3.12Symantec Antivirus Scan Engine 4.3Symantec Brightmail Antispam 6.0.1Symantec Brightmail Antispam 6.0.2Symantec Client Security 2.0.4Symantec Client Security 3.0.1.1001Symantec Client Security 3.0.1.1007Symantec Client Security 3.0.2.2020Symantec Client Security 3.0.2.2021Symantec Mail Security 4.0Symantec Mail Security 4.1Symantec Mail Security 4.6.3Symantec Mail Security 4.6 Build 97Symantec Norton AntivirusSymantec Norton Antivirus 10.0.0.359Symantec Norton Antivirus 10.0.2.2002Symantec Norton Antivirus 10.0.2.2010Symantec Norton Antivirus 10.1.396Symantec Norton Antivirus 10.1.4.4010Symantec Norton Antivirus 2004Symantec Norton Antivirus 2005Symantec Norton Antivirus 9.0.1.1.1000
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook