Unscored severity · published May 2, 2005
CVE-2005-1346
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,…
–
CVSS
1.5%
EPSS
No
On KEV
Description
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Antivirus Scan Engine · Symantec
4.3.7.27 · source: NVD
MS
Mail Security · Symantec
4.0.5.66; 4.5.4.743 · source: NVD
NA
Norton Antivirus · Symantec
2005_11.0.0 · source: NVD
NI
Norton Internet Security · Symantec
2005_contains_nav_11.0.0 · source: NVD
NS
Norton System Works · Symantec
2005_contains_nav_11.0.0 · source: NVD
SF
Symav Filter Domino NT · Symantec
3.1.1.87 · source: NVD
WS
Web Security · Symantec
3.0.1.72 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1346
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1346
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2005.04.27.html
More from Antivirus Scan Engine
7.0
CVE-2004-0217
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink…
–
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR…
–
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives
–
CVE-2006-0231
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct…
–
CVE-2006-0230
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator…