Unscored severity · published May 16, 2007
CVE-2007-1689
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary…
–
CVSS
65%
EPSS
No
On KEV
Description
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)65.0% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NI
Norton Internet Security · Symantec
2004 · source: NVD
NP
Norton Personal Firewall · Symantec
2004 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1689
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1689
osvdb.org
http://osvdb.org/36164
Vendor Advisory
http://secunia.com/advisories/25290
US Government Resource
http://www.kb.cert.org/vuls/id/983953
www.securityfocus.com
http://www.securityfocus.com/archive/1/468779/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/23936
www.securitytracker.com
http://www.securitytracker.com/id?1018073
More from Norton Internet Security
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…