Unscored severity · published Apr 8, 2008
CVE-2008-0312
Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006…
–
CVSS
6.1%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.1% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
Norton 360 · Symantec
1.0 · source: NVD
NA
Norton Antivirus · Symantec
2006; 2007; 2008 · source: NVD
NI
Norton Internet Security · Symantec
2006; 2007; 2008 · source: NVD
NS
Norton System Works · Symantec
2006; 2007; 2008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0312
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0312
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677
Patch
http://secunia.com/advisories/29660
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html
Patch
http://www.securityfocus.com/bid/28507
Patch
http://www.securitytracker.com/id?1019751
Patch
http://www.securitytracker.com/id?1019752
More from Norton 360
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…