cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2008-0312,https://securityvulnerability.io/vulnerability/CVE-2008-0312,,"Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method.  NOTE: some of these details are obtained from third party information.",Symantec,"Norton 360,Norton Antivirus,Norton Internet Security,Norton System Works",,,0.07197000086307526,false,,false,false,false,,,false,false,,2008-04-08T17:00:00.000Z,0
CVE-2008-0313,https://securityvulnerability.io/vulnerability/CVE-2008-0313,,"The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.",Symantec,"Norton Internet Security,Norton Antivirus,System Works,Norton 360",,,0.009469999931752682,false,,false,false,false,,,false,false,,2008-04-08T17:00:00.000Z,0
CVE-2007-3699,https://securityvulnerability.io/vulnerability/CVE-2007-3699,,The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.0521400012075901,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-0447,https://securityvulnerability.io/vulnerability/CVE-2007-0447,,Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.,Symantec,"Mail Security,Client Security,Norton Antivirus,Norton Internet Security,Antivirus Scan Engine,Web Security,Brightmail Antispam,Norton System Works,Symantec Antivirus Filtering \+for Domino,Norton Personal Firewall",,,0.1824599951505661,false,,false,false,false,,,false,false,,2007-10-05T21:00:00.000Z,0
CVE-2007-2955,https://securityvulnerability.io/vulnerability/CVE-2007-2955,,"Multiple unspecified ""input validation error"" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.",Symantec,"Norton System Works,Norton Internet Security,Norton Antivirus",,,0.9056199789047241,false,,false,false,false,,,false,false,,2007-08-09T21:00:00.000Z,0
CVE-2007-3673,https://securityvulnerability.io/vulnerability/CVE-2007-3673,,"Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet Security, Personal Firewall, and System Works 2005 and 2006; allows local users to gain privileges via a crafted Interrupt Request Packet (Irp) in an IOCTL 0x83022323 request to \\symTDI\, which results in memory overwrite.",Symantec,"Norton Antivirus,Client Security,Norton System Works,Norton Antispam,Norton Personal Firewall,Norton Internet Security",,,0.0004199999966658652,false,,false,false,false,,,false,false,,2007-07-15T21:00:00.000Z,0
CVE-2006-3456,https://securityvulnerability.io/vulnerability/CVE-2006-3456,,"The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to ""crash the control"" via unspecified vectors related to content on a web site, and place Internet Explorer into a ""defunct state"" in which remote attackers can execute arbitrary code in addition to other Symantec ActiveX controls, regardless of whether they are marked safe for scripting.  NOTE: this CVE was inadvertently used for an E-mail Auto-Protect issue, but that issue has been assigned CVE-2007-3771.",Symantec,"Norton System Works,Norton Antivirus,Norton Internet Security",,,0.027580000460147858,false,,false,false,false,,,false,false,,2007-05-11T10:00:00.000Z,0
CVE-2007-1793,https://securityvulnerability.io/vulnerability/CVE-2007-1793,,"SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateMutant and (2) NtOpenEvent functions.  NOTE: it was later reported that Norton Internet Security 2008 15.0.0.60, and possibly other versions back to 2006, are also affected.",Symantec,"Client Security,Antivirus,Norton Internet Security,Norton System Works,Norton Antivirus,Norton Personal Firewall,Norton Antispam,Norton 360",,,0.0006600000197067857,false,,false,false,false,,,false,false,,2007-04-02T22:00:00.000Z,0
CVE-2007-1476,https://securityvulnerability.io/vulnerability/CVE-2007-1476,,"The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.",Symantec,"Norton Antivirus,Client Security,Norton System Works,Norton Personal Firewall,Norton Antispam,Norton Internet Security",,,0.0004299999854993075,false,,false,false,false,,,false,false,,2007-03-16T21:00:00.000Z,0
CVE-2006-5403,https://securityvulnerability.io/vulnerability/CVE-2006-5403,,"Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.",Symantec,"Norton System Works,Norton Antivirus,Norton Internet Security,Automated Support Assistant",,,0.10971999913454056,false,,false,false,false,,,false,false,,2006-10-19T01:00:00.000Z,0
CVE-2006-5404,https://securityvulnerability.io/vulnerability/CVE-2006-5404,,"Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors.",Symantec,"Norton System Works,Norton Antivirus,Norton Internet Security,Automated Support Assistant",,,0.043230000883340836,false,,false,false,false,,,false,false,,2006-10-19T01:00:00.000Z,0
CVE-2006-4855,https://securityvulnerability.io/vulnerability/CVE-2006-4855,,"The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.",Symantec,"Norton Antivirus,Client Security,Norton Internet Security,Norton Personal Firewall,Norton System Works,Pcanywhere,Host Ids",,,0.0004199999966658652,false,,false,false,false,,,false,false,,2006-09-19T18:00:00.000Z,0
CVE-2006-1836,https://securityvulnerability.io/vulnerability/CVE-2006-1836,,"Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.",Symantec,"Liveupdate,Norton Antivirus,Norton Personal Firewall,Norton System Works,Norton Utilities,Norton Internet Security",,,0.0006000000284984708,false,,false,false,false,,,false,false,,2006-04-19T16:00:00.000Z,0
CVE-2006-0166,https://securityvulnerability.io/vulnerability/CVE-2006-0166,,"Symantec Norton SystemWorks and SystemWorks Premier 2005 and 2006 stores temporary copies of files in the Norton Protected Recycle Bin NProtect directory, which is hidden from the FindFirst and FindNext Windows APIs and allows remote attackers to hide arbitrary files from virus scanners and other products.",Symantec,Norton System Works,,,0.0018500000005587935,false,,false,false,false,,,false,false,,2006-01-11T21:00:00.000Z,0
CVE-2005-1346,https://securityvulnerability.io/vulnerability/CVE-2005-1346,,"Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.",Symantec,"Norton Internet Security,Symav Filter Domino Nt,Mail Security,Antivirus Scan Engine,Web Security,Norton Antivirus,Norton System Works",,,0.002689999993890524,false,,false,false,false,,,false,false,,2005-05-02T04:00:00.000Z,0
CVE-2005-0922,https://securityvulnerability.io/vulnerability/CVE-2005-0922,,"Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (system hang or crash) by triggering a scan of a certain file type.",Symantec,"Norton Internet Security,Norton System Works,Norton Antivirus",,,0.0017500000540167093,false,,false,false,false,,,false,false,,2005-05-02T04:00:00.000Z,0
CVE-2005-0923,https://securityvulnerability.io/vulnerability/CVE-2005-0923,,"The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.",Symantec,"Norton Internet Security,Norton System Works,Norton Antivirus",,,0.0005099999834783375,false,,false,false,false,,,false,false,,2005-05-02T04:00:00.000Z,0
CVE-2005-0249,https://securityvulnerability.io/vulnerability/CVE-2005-0249,,Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.,Symantec,"Norton Internet Security,Client Security,Mail Security,Norton Antivirus,Sav Filter Domino Nt Ports,Web Security,Norton System Works,Brightmail Antispam,Gateway Security,Sav Filter For Domino Nt,Antivirus Scan Engine",,,0.01566999964416027,false,,false,false,false,,,false,false,,2005-02-08T05:00:00.000Z,0
CVE-2003-0994,https://securityvulnerability.io/vulnerability/CVE-2003-0994,,"The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges.",Symantec,"Norton Antivirus,Norton Internet Security,Norton System Works,Windows Liveupdate",,,0.0004299999854993075,false,,false,false,false,,,false,false,,2004-02-03T05:00:00.000Z,0