Unscored severity · published Apr 29, 2009
CVE-2009-1428
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Symantec
through 10.1; 10.0; 10.0.1; 10.0.1.1; 10.0.2; 10.0.2.1; +8 more · source: NVD
EP
Endpoint Protection · Symantec
11.0 · source: NVD
N3
Norton 360 · Symantec
1.0 · source: NVD
NI
Norton Internet Security · Symantec
2005; 2005; 2005; 2005; 2005; 2005_contains_nav_11.0.0; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1428
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1428
osvdb.org
http://osvdb.org/54132
secunia.com
http://secunia.com/advisories/34936
www.securityfocus.com
http://www.securityfocus.com/bid/34669
www.securitytracker.com
http://www.securitytracker.com/id?1022133
www.securitytracker.com
http://www.securitytracker.com/id?1022134
www.securitytracker.com
http://www.securitytracker.com/id?1022135
More from Antivirus
–
CVE-2012-4953
The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and…
–
CVE-2011-0688
Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec…
–
CVE-2010-0111
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate…
–
CVE-2010-0110
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec…
–
CVE-2010-3268
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as…