Priority HIGH 79
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.65006 · Published 2007-05-16 · No fix listed
Priority MEDIUM 57
Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Clien…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.12798 · Published 2004-05-20 · No fix listed
Priority MEDIUM 49
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05957 · Published 2007-10-05 · No fix listed CWE-119
Priority MEDIUM 47
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03914 · Published 2007-10-05 · No fix listed
Priority LOW 39
Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.0325 · Published 2003-04-02 · No fix listed
Priority LOW 36
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01349 · Published 2005-06-21 · No fix listed
Priority LOW 36
Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.01544 · Published 2005-06-21 · No fix listed
Priority LOW 34
SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.08832 · Published 2004-05-05 · No fix listed
Priority LOW 33
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewal…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.01059 · Published 2007-07-15 · No fix listed
Priority LOW 30
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program…
CVSS 2.0MEDIUM 6.8· Local · Low privileges · Interaction — · EPSS 0.00388 · Published 2006-04-19 · No fix listed
Priority LOW 26
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.01736 · Published 2007-04-02 · No fix listed CWE-20
Priority LOW 26
The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 thr…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.11048 · Published 2004-05-20 · No fix listed
Priority LOW 25
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.01323 · Published 2006-09-19 · No fix listed CWE-399
Priority LOW 25
Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02549 · Published 2007-10-29 · No fix listed CWE-16
Priority LOW 23
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other products using symevent.sys 12.0.0.20, allows local users to cause a denial of service (system crash) via invalid data, as…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00425 · Published 2007-03-16 · No fix listed
Priority LOW 17
Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegResto…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00351 · Published 2006-08-21 · No fix listed
Priority LOW 12
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows lo…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00892 · Published 2007-03-16 · No fix listed CWE-20
Priority LOW 11
Norton Personal Firewall 2006 9.1.0.33 allows local users to cause a denial of service (crash) via certain RegSaveKey, RegRestoreKey and RegDeleteKey operations on the (1) HKLM\SYSTEM\CurrentControlSet\Services\SNDSrvc a…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.004 · Published 2006-07-19 · No fix listed