CVE-2002-1775: High severity Symantec Norton Antivirus vulnerability

Published Dec 31, 2002

Updated

DISPUTED NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed.

Affected Software

1 affected component

Symantec Norton Antivirus=2002

Event History

Dec 31, 2002

CVE Published

via NVD·05:00 AM

Disputed

05:00 AM

Jun 21, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1775?

The severity of CVE-2002-1775 is considered low, as the issue has been disputed by the vendor.

How do I fix CVE-2002-1775?

To fix CVE-2002-1775, ensure that you are using the latest version of Symantec Norton AntiVirus since the vendor has acknowledged the issue.

What does CVE-2002-1775 involve?

CVE-2002-1775 involves a vulnerability that allows remote attackers to bypass the initial virus scan in Symantec Norton AntiVirus 2002.

Who is affected by CVE-2002-1775?

CVE-2002-1775 affects users of Symantec Norton AntiVirus version 2002.

Has CVE-2002-1775 been resolved?

CVE-2002-1775 remains unaddressed in terms of a formal patch as the vendor disputes the existence of the vulnerability.