Unscored severity · published Apr 8, 2008
CVE-2008-0313
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0,…
–
CVSS
4%
EPSS
No
On KEV
Description
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.0% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
Norton 360 · Symantec
1.0 · source: NVD
NA
Norton Antivirus · Symantec
2006; 2007; 2008 · source: NVD
NI
Norton Internet Security · Symantec
2006; 2007; 2008 · source: NVD
SW
System Works · Symantec
2006; 2007; 2008 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0313
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0313
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678
Patch
http://secunia.com/advisories/29660
securityresponse.symantec.com
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html
Patch
http://www.securityfocus.com/bid/28509
www.securitytracker.com
http://www.securitytracker.com/id?1019751
www.securitytracker.com
http://www.securitytracker.com/id?1019752
More from Norton 360
9.8
CVE-2016-3645
Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through…
8.4
CVE-2016-3646
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-3644
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
8.4
CVE-2016-2207
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec…
7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,…