Read the docs
TI-2005-00215 Aliases CVE-2005-0249GHSA-4xqg-rgj7-cf6v

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows…

Priority MEDIUM 51Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Why it matters now

EPSS 0.18832 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*before 4.3.3VulnerableSymantec
cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*4.0VulnerableSymantec
cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*5.5VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*1.0.1_build_8.01.434 mr3VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*1.0.1_build_8.01.437VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*1.0.1_build_8.01.446 mr4VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*1.0.1_build_8.01.457 mr5VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*1.0.1_build_8.01.460 mr6VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*1.0.1_build_8.01.464 mr7VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*1.0.1_build_8.01.471 mr8VulnerableSymantec
  • cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:* Versions before 4.3.3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:* Versions 5.5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:* Versions 1.0.1_build_8.01.434 mr3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:* Versions 1.0.1_build_8.01.437 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:* Versions 1.0.1_build_8.01.446 mr4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:* Versions 1.0.1_build_8.01.457 mr5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:* Versions 1.0.1_build_8.01.460 mr6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:* Versions 1.0.1_build_8.01.464 mr7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:* Versions 1.0.1_build_8.01.471 mr8 Vulnerable ·Symantec
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*1.1.1_mr1_build_8.1.1.314aVulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*1.1.1_mr2_build_8.1.1.319VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*1.1.1_mr3_build_8.1.1.323VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*1.1.1_mr4_build_8.1.1.329VulnerableSymantec
cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*1.1.1_mr5_build_8.1.1.336VulnerableSymantec
cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:*1.0VulnerableSymantec
cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:*2.0VulnerableSymantec
cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableSymantec
cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*4.0VulnerableSymantec
cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:*4.1 build_458VulnerableSymantec
cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:*4.1 build_459VulnerableSymantec
cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:*4.1 build_461VulnerableSymantec
cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:*4.5_build_719VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:*2.18_build_83VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*8.1.1.319VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*8.1.1.323VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*8.1.1.329VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*8.1.1_build8.1.1.314aVulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*8.01.434VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*8.01.437VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*8.01.446VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*8.01.457VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*8.01.460VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*8.01.464VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*8.01.471VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:*9.0VulnerableSymantec
cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:*2004VulnerableSymantec
cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*2004VulnerableSymantec
cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:*2004VulnerableSymantec
cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:*build3.0.5VulnerableSymantec
cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:*build3.0.5VulnerableSymantec
cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*3.01.59VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*3.01.60VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*3.01.61VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*3.01.62VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*3.01.63VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*3.01.67VulnerableSymantec
cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*3.01.68VulnerableSymantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:* Versions 1.1.1_mr1_build_8.1.1.314a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:* Versions 1.1.1_mr2_build_8.1.1.319 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:* Versions 1.1.1_mr3_build_8.1.1.323 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:* Versions 1.1.1_mr4_build_8.1.1.329 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:* Versions 1.1.1_mr5_build_8.1.1.336 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:* Versions 4.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:* Versions 4.1 build_458 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:* Versions 4.1 build_459 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:* Versions 4.1 build_461 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:* Versions 4.5_build_719 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:* Versions 2.18_build_83 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:* Versions 8.1.1.319 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:* Versions 8.1.1.323 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:* Versions 8.1.1.329 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:* Versions 8.1.1_build8.1.1.314a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:* Versions 8.01.434 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:* Versions 8.01.437 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:* Versions 8.01.446 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:* Versions 8.01.457 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:* Versions 8.01.460 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:* Versions 8.01.464 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:* Versions 8.01.471 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:* Versions 9.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:* Versions 2004 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:* Versions 2004 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:* Versions 2004 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:* Versions build3.0.5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:* Versions build3.0.5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:* Versions 3.01.59 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:* Versions 3.01.60 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:* Versions 3.01.61 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:* Versions 3.01.62 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:* Versions 3.01.63 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:* Versions 3.01.67 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:* Versions 3.01.68 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-0249
  2. 2026-10-03 Alias added: GHSA-4xqg-rgj7-cf6v

References

Patch 3

  • TI-2006-00221 Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a… CVSS 2.0HIGH 10.0
  • TI-2005-02620 Integer signedness error in the administrative interface for Symantec AntiVirus Scan… CVSS 2.0HIGH 10.0
  • TI-2007-00434 Heap-based buffer overflow in the Decomposer component in multiple Symantec products… CVSS 2.0HIGH 9.3
  • TI-2007-03589 The Decomposer component in multiple Symantec products allows remote attackers to cause a… CVSS 2.0HIGH 9.3
  • TI-2006-00222 Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same… CVSS 2.0MEDIUM 6.4
  • TI-2004-00188 The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3… CVSS 3.1HIGH 7.0
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences