Unscored severity · published Apr 15, 2004
CVE-2004-0364
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the…
–
CVSS
3.7%
EPSS
No
On KEV
Description
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NI
Norton Internet Security · Symantec
2004; 2004 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0364
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0364
marc.info
http://marc.info/?l=bugtraq&m=107970885922442&w=2
marc.info
http://marc.info/?l=bugtraq&m=107980262324362&w=2
secunia.com
http://secunia.com/advisories/11168
US Government Resource
http://www.kb.cert.org/vuls/id/549054
Patch
http://www.nextgenss.com/advisories/nisrce.txt
www.sarc.com
http://www.sarc.com/avcenter/security/Content/2004.03.19.html
More from Norton Internet Security
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…