NI
Product
Norton Internet Security
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 0Low 0
Watch
Add Norton Internet Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3645 | 9.8 | Jun 30 | Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through… Affected: All versions, or not specified |
| CVE-2016-3646 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-3644 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-2207 | 8.4 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-5311 | 7.8 | Jan 9 | A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security,… Affected: before 22.7 |
| CVE-2016-2211 | 7.8 | Jun 30 | The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec… Affected: All versions, or not specified |
| CVE-2016-2210 | 7.3 | Jun 30 | Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: All versions, or not specified |
| CVE-2016-2209 | 7.3 | Jun 30 | Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1;… Affected: All versions, or not specified |
| CVE-2010-0107 | – | Feb 23 | Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and… Affected: 2006; 2007; 2008 |
| CVE-2009-3104 | – | Sep 8 | Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before… Affected: 2005; 2006; 2007; 2008 |
| CVE-2009-1428 | – | Apr 29 | Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection… Affected: 2005; 2005; 2005; 2005; 2005; 2005_contains_nav_11.0.0; +4 more |
| CVE-2008-0312 | – | Apr 8 | Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006… Affected: 2006; 2007; 2008 |
| CVE-2008-0313 | – | Apr 8 | The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0,… Affected: 2006; 2007; 2008 |
| CVE-2007-5829 | – | Nov 5 | The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a… Affected: 3.0 |
| CVE-2007-0447 | – | Oct 5 | Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives Affected: 3.0; 2004; 2004; 2005; 2005; 2005; +4 more |
| CVE-2007-3699 | – | Oct 5 | The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR… Affected: 3.0; 2004; 2004; 2005; 2005; 2005; +4 more |
| CVE-2007-5047 | – | Sep 24 | Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which allows local users to… Affected: 2008_15.0.0.60 |
| CVE-2007-2955 | – | Aug 9 | Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System… Affected: 2005; 2006 |
| CVE-2007-3673 | – | Jul 15 | Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton… Affected: 2005; 2006 |
| CVE-2007-1689 | – | May 16 | Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary… Affected: 2004 |
| CVE-2006-3456 | – | May 11 | The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is… Affected: 2005; 2006 |
| CVE-2007-1793 | – | Apr 2 | SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows… Affected: 2004; 2005; 2006; 2007; 2008 |
| CVE-2007-1476 | – | Mar 16 | The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through… Affected: 2005; 2006 |
| CVE-2006-6490 | – | Feb 22 | Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and… Affected: 2006 |
| CVE-2006-5403 | – | Oct 19 | Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,… Affected: 2006 |
| CVE-2006-5404 | – | Oct 19 | Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006,… Affected: 2006 |
| CVE-2006-4855 | – | Sep 19 | The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec… Affected: 2003; 2003; 2004; 2004; 2005; 2005; +2 more |
| CVE-2006-1836 | – | Apr 19 | Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to… Affected: 3.0 |
| CVE-2005-0923 | – | May 2 | The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows… Affected: 2004; 2005 |
| CVE-2005-1346 | – | May 2 | Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27,… Affected: 2005_contains_nav_11.0.0 |
| CVE-2005-0922 | – | May 2 | Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows… Affected: 2004; 2005 |
| CVE-2005-0249 | – | Feb 8 | Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative… Affected: 2004 |
| CVE-2004-0375 | – | Aug 18 | SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow… Affected: 2003; 2003; 2004; 2004 |
| CVE-2004-0444 | – | Jul 7 | Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004,… Affected: 2002; 2002; 2003; 2003; 2004; 2004 |
| CVE-2004-0445 | – | Jul 7 | The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall… Affected: 2002; 2002; 2003; 2003; 2004; 2004 |
| CVE-2004-0364 | – | Apr 15 | The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the… Affected: 2004; 2004 |
| CVE-2003-0994 | – | Feb 3 | The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through… Affected: 2001; 2001; 2002; 2002; 2003; 2003; +2 more |
| CVE-2003-1149 | – | Oct 27 | Cross-site scripting (XSS) vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked… Affected: 2003_6.0.4.34 |
| CVE-2002-1695 | – | Dec 31 | Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while… Affected: 2001 |
| CVE-2002-0663 | – | Jul 26 | Buffer overflow in HTTP Proxy for Symantec Norton Personal Internet Firewall 3.0.4.91 and Norton Internet Security 2001 allows remote attackers to cause a denial of service and… Affected: 2001 |
Showing 40