Login Request a demo
Unscored severity · published Aug 9, 2007
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System…
–
CVSS
4%
EPSS
No
On KEV
Description
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Norton Antivirus · Symantec
2006 · source: NVD
NI
Norton Internet Security · Symantec
2005; 2006 · source: NVD
NS
Norton System Works · Symantec
2006 · source: NVD
Affected product
NA
Norton Antivirus
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-2955
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-2955
secunia.com
http://secunia.com/advisories/25215
Vendor Advisory
http://secunia.com/secunia_research/2007-53/advisory/
www.securityfocus.com
http://www.securityfocus.com/bid/24983
www.securitytracker.com
http://www.securitytracker.com/id?1018545
www.securitytracker.com
http://www.securitytracker.com/id?1018546
www.securitytracker.com
http://www.securitytracker.com/id?1018547
More from Norton Antivirus
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…