NA
Product
Norton Antivirus
67
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 9Medium 1Low 0
Watch
Add Norton Antivirus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3645 | 9.8 | Jun 30 | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through… Affected: All versions, or not specified |
| CVE-2016-3646 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-3644 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-2207 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-5311 | 7.8 | Jan 9 | A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,… Affected: before 22.7 |
| CVE-2018-12238 | 7.8 | Nov 29 | Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 &… Affected: before 22.15 |
| CVE-2016-2211 | 7.8 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2002-0485 | 7.5 | Aug 12 | Norton Anti-Virus (NAV) allows remote attackers to bypass content filtering via attachments whose Content-Type and Content-Disposition headers are mixed upper and lower case,… Affected: All versions, or not specified |
| CVE-2016-2210 | 7.3 | Jun 30 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: All versions, or not specified |
| CVE-2016-2209 | 7.3 | Jun 30 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: All versions, or not specified |
| CVE-2018-12239 | 6.8 | Nov 29 | Norton prior to 22.15; Symantec Endpoint Protection (SEP) prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition (SEP SBE) prior to NIS-22.15.1.8 &… Affected: before 22.15 |
| CVE-2010-3497 | – | Aug 22 | Symantec Norton AntiVirus 2011 does not properly interact with the processing of hcp:// URLs by the Microsoft Help and Support Center, which makes it easier for remote attackers… Affected: 2011 |
| CVE-2010-0107 | – | Feb 23 | Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and… Affected: 2006; 2007; 2008 |
| CVE-2009-3104 | – | Sep 8 | Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before… Affected: 2005; 2006; 2007; 2008 |
| CVE-2008-0312 | – | Apr 8 | Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006… Affected: 2006; 2007; 2008 |
| CVE-2008-0313 | – | Apr 8 | The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0,… Affected: 2006; 2007; 2008 |
| CVE-2007-5829 | – | Nov 5 | The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a… Affected: 9.0; 9.0.1; 9.0.2; 9.0.3; 10.0; 10.1 |
| CVE-2007-0447 | – | Oct 5 | Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives Affected: 9.0; 9.0; 9.0.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; +34 more |
| CVE-2007-3699 | – | Oct 5 | The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR… Affected: 9.0; 9.0; 9.0.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; +34 more |
| CVE-2007-2955 | – | Aug 9 | Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System… Affected: 2006 |
| CVE-2007-3800 | – | Jul 16 | Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client Security 2.0 through 3.1, when the… Affected: through 10.1; 9.0; 10.0 |
| CVE-2007-3771 | – | Jul 15 | Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to… Affected: 9.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; 9.0.1.1000; 9.0.2; +15 more |
| CVE-2007-3673 | – | Jul 15 | Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton… Affected: 9.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; 9.0.1.1000; 9.0.2; +9 more |
| CVE-2007-3095 | – | Jun 6 | Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus… Affected: 10.0.2.2021; 10.1; 10.1.396; 10.1.400; 10.1.401 |
| CVE-2007-3021 | – | Jun 5 | Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1… Affected: 10.0.2.2021; 10.1; 10.1.396; 10.1.400; 10.1.401 |
| CVE-2007-3022 | – | Jun 5 | Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1… Affected: 10.0.2.2021; 10.1; 10.1.396; 10.1.400; 10.1.401 |
| CVE-2006-3456 | – | May 11 | The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is… Affected: 2005; 2006 |
| CVE-2007-1793 | – | Apr 2 | SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows… Affected: 2004; 2005; 2006; 2007; 2008 |
| CVE-2007-1476 | – | Mar 16 | The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through… Affected: 3.0; 9.0; 9.0.0.338; 9.0.1; 9.0.1.1.1000; 9.0.1.1000; +27 more |
| CVE-2006-6490 | – | Feb 22 | Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and… Affected: 2006 |
| CVE-2006-3455 | – | Oct 23 | The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users… Affected: 8.1; 8.1.0.825a; 8.1.1; 8.1.1.319; 8.1.1.323; 8.1.1.329; +16 more |
| CVE-2006-5403 | – | Oct 19 | Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,… Affected: All versions, or not specified |
| CVE-2006-5404 | – | Oct 19 | Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,… Affected: All versions, or not specified |
| CVE-2006-4855 | – | Sep 19 | The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec… Affected: 2.1; 8.0; 8.0.1; 8.0.1.425a; 8.0.1.425c; 8.0.1.501; +34 more |
| CVE-2006-4802 | – | Sep 14 | Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to… Affected: 8.1; 8.1.1.319; 8.1.1.323; 8.1.1.329; 8.1.1_build8.1.1.314a; 9.0; +5 more |
| CVE-2006-3454 | – | Sep 14 | Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via… Affected: 8.1; 9.0; 9.0.1; 9.0.2; 10.0 |
| CVE-2006-2630 | – | May 27 | Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors Affected: 10.0; 10.0.2.2010; 10.0.2.2020; 10.0.2.2021; 10.1; 10.1.400 |
| CVE-2006-1836 | – | Apr 19 | Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to… Affected: 9.0.0; 9.0.1; 9.0.2; 9.0.3; 10.0; 10.0.0; +2 more |
| CVE-2005-3270 | – | Oct 21 | Untrusted search path vulnerability in DiskMountNotify for Symantec Norton AntiVirus 9.0.3 allows local users to gain privileges by modifying the PATH to reference a malicious (1)… Affected: 9.0.3 |
| CVE-2005-2759 | – | Oct 20 | ** SPLIT ** The jlucaller program in LiveUpdate for Symantec Norton AntiVirus 9.0.3 on Macintosh runs setuid when executing Java programs, which allows local users to gain… Affected: 9.0.3 |
| CVE-2005-2766 | – | Sep 2 | Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in… Affected: 9.0.1.1.1000; 9.0.4 |
| CVE-2005-2017 | – | Aug 30 | Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a… Affected: 9.0.1.1000 |
| CVE-2005-0923 | – | May 2 | The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows… Affected: 2.1; 2005 |
| CVE-2005-1346 | – | May 2 | Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,… Affected: 2005_11.0.0 |
| CVE-2005-0922 | – | May 2 | Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows… Affected: 2.1; 2005 |
| CVE-2005-0249 | – | Feb 8 | Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative… Affected: 2.18_build_83; 8.1.1.319; 8.1.1.323; 8.1.1.329; 8.1.1_build8.1.1.314a; 8.01.434; +8 more |
| CVE-2004-2147 | – | Dec 31 | Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2)… Affected: 2.1; 2001; 2002; 2003; corporate_7.0; corporate_7.2; +10 more |
| CVE-2004-0920 | – | Nov 3 | Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename… Affected: through 2.1 |
| CVE-2004-0487 | – | Aug 18 | A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs Affected: 2.1 |
| CVE-2004-0683 | – | Aug 6 | Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories Affected: 2002; 2003 |