AS
Product
Antivirus Scan Engine
10
CVEs
0
On KEV
7.0
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Antivirus Scan Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-0217 | 7.0 | Apr 15 | The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink… Affected: 4.0; 4.3 |
| CVE-2007-3699 | – | Oct 5 | The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR… Affected: 4.0; 4.0; 4.1; 4.1.8; 4.3; 4.3; +14 more |
| CVE-2007-0447 | – | Oct 5 | Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives Affected: 4.0; 4.0; 4.1; 4.1.8; 4.3; 4.3; +14 more |
| CVE-2006-0231 | – | Apr 25 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct… Affected: 5.0.0.24 |
| CVE-2006-0230 | – | Apr 25 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator… Affected: 5.0.0.24 |
| CVE-2006-0232 | – | Apr 25 | Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control,… Affected: 5.0.0.24 |
| CVE-2005-3217 | – | Oct 14 | Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR… Affected: All versions, or not specified |
| CVE-2005-2758 | – | Oct 5 | Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.3; +3 more |
| CVE-2005-1346 | – | May 2 | Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,… Affected: 4.3.7.27 |
| CVE-2005-0249 | – | Feb 8 | Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative… Affected: before 4.3.3 |
Showing 10