CVE-2004-0363

Опубликовано: 15 апр. 2004

Источник: nvd

CVSS2: 7.5

EPSS Высокий

Описание

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.

Ссылки

http://marc.info/?l=bugtraq&m=107970870606638&w=2
http://marc.info/?l=bugtraq&m=107980262324362&w=2
http://secunia.com/advisories/11169
http://www.kb.cert.org/vuls/id/344718
US Government Resource
http://www.nextgenss.com/advisories/antispam.txt
Patch
Vendor Advisory
http://www.sarc.com/avcenter/security/Content/2004.03.19.html
http://www.securityfocus.com/bid/9916
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15536
http://marc.info/?l=bugtraq&m=107970870606638&w=2
http://marc.info/?l=bugtraq&m=107980262324362&w=2
http://secunia.com/advisories/11169
http://www.kb.cert.org/vuls/id/344718
US Government Resource
http://www.nextgenss.com/advisories/antispam.txt
Patch
Vendor Advisory
http://www.sarc.com/avcenter/security/Content/2004.03.19.html
http://www.securityfocus.com/bid/9916
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15536

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:symantec:norton_antispam:2004:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.72679

Высокий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-2mg5-26r6-fpmg

github

почти 4 года назад