Login Request a demo
Unscored severity · published Jan 30, 2007
CVE-2007-0564
The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file
–
CVSS
1.1%
EPSS
No
On KEV
Description
The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WS
Web Security · Symantec
through 3.0.1.72; 3.01.59; 3.01.60; 3.01.61; 3.01.62; 3.01.63; +2 more · source: NVD
Affected product
WS
Web Security
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0564
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0564
Patch
http://secunia.com/advisories/23896
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html
securitytracker.com
http://securitytracker.com/id?1017558
www.vupen.com
http://www.vupen.com/english/advisories/2007/0330
More from Web Security
–
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives
–
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR…
–
CVE-2007-0563
Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified…
–
CVE-2005-1346
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,…
–
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative…