Unscored severity · published Nov 5, 2007
CVE-2007-5829
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a…
–
CVSS
0.3%
EPSS
No
On KEV
Description
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NA
Norton Antivirus · Symantec
9.0; 9.0.1; 9.0.2; 9.0.3; 10.0; 10.1 · source: NVD
NI
Norton Internet Security · Symantec
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5829
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5829
osvdb.org
http://osvdb.org/40864
Vendor Advisory
http://secunia.com/advisories/27488
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2007.11.02.html
securitytracker.com
http://securitytracker.com/id?1018889
securitytracker.com
http://securitytracker.com/id?1018890
www.securityfocus.com
http://www.securityfocus.com/bid/26253
More from Norton Antivirus
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…