CVE-2002-1774: High severity Symantec Norton Antivirus vulnerability

Published Dec 31, 2002

Updated

DISPUTED NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.

Affected Software

1 affected component

Symantec Norton Antivirus=2002

Event History

Dec 31, 2002

CVE Published

05:00 AM

Disputed

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1774?

The severity of CVE-2002-1774 is disputed by the vendor, but it involves a potential vulnerability in email scanning.

How do I fix CVE-2002-1774?

To address CVE-2002-1774, ensure you are using the latest version of Symantec Norton AntiVirus and follow vendor guidance.

What software is affected by CVE-2002-1774?

CVE-2002-1774 affects Symantec Norton AntiVirus version 2002.

Can CVE-2002-1774 be exploited remotely?

Yes, CVE-2002-1774 allows remote attackers to exploit the vulnerability via specially crafted emails.

Is there a patch for CVE-2002-1774?

Symantec has not confirmed a patch for CVE-2002-1774 due to the disputed nature of the vulnerability.