4.6
CVSSv2

CVE-2007-3771

Published: 15/07/2007 Updated: 29/07/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.9 | Exploitability Score: 3.1
VMScore: 409
Vector: AV:L/AC:L/Au:S/C:N/I:N/A:C

Vulnerability Summary

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition prior to 10.1, and Client Security prior to 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.

Vulnerable Product Search on Vulmon Subscribe to Product

symantec client security 3.0.1.1007

symantec client security 3.0.1.1009

symantec norton antivirus 10.0.1.1000

symantec norton antivirus 10.0.1.1007

symantec norton antivirus 10.0.2.2021

symantec norton antivirus 10.0

symantec norton antivirus 9.0.4

symantec norton antivirus 9.0.5.1100

symantec client security 3.0.2

symantec client security 3.0.2.2000

symantec norton antivirus 10.0.2.2000

symantec norton antivirus 10.0.2.2001

symantec norton antivirus 9.0.0.338

symantec norton antivirus 9.0.1.1.1000

symantec norton antivirus 9.0.5

symantec norton antivirus 9.0

symantec client security 2.0

symantec client security 3.0

symantec client security 3.0.1.1000

symantec client security 3.0.2.2011

symantec client security 3.0.2.2021

symantec norton antivirus 10.0.2.2011

symantec norton antivirus 10.0.2.2020

symantec norton antivirus 9.0.2

symantec norton antivirus 9.0.3.1000

symantec client security 3.0.2.2001

symantec client security 3.0.2.2002

symantec norton antivirus 10.0.2.2002

symantec norton antivirus 10.0.2.2010

symantec norton antivirus 9.0.1.1000

symantec norton antivirus 9.0.1

symantec norton antivirus 9.0.2.1000