First published: Tue Dec 31 2002(Updated: )
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Norton Antivirus | =2002 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2002-1774 is disputed by the vendor, but it involves a potential vulnerability in email scanning.
To address CVE-2002-1774, ensure you are using the latest version of Symantec Norton AntiVirus and follow vendor guidance.
CVE-2002-1774 affects Symantec Norton AntiVirus version 2002.
Yes, CVE-2002-1774 allows remote attackers to exploit the vulnerability via specially crafted emails.
Symantec has not confirmed a patch for CVE-2002-1774 due to the disputed nature of the vulnerability.