First published: Tue Dec 31 2002(Updated: )
** DISPUTED ** NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to bypass virus protection via a Word Macro virus with a .nch or .dbx extension, which is automatically recognized and executed as a Microsoft Office document. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the Office plug-in would detect the virus before it is executed.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Norton Antivirus | =2002 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2002-1776 is disputed by the vendor, indicating potential ambiguity regarding its impact.
To mitigate CVE-2002-1776, ensure that Norton AntiVirus 2002 is updated to the latest version available from Symantec.
CVE-2002-1776 specifically affects Symantec Norton AntiVirus 2002.
CVE-2002-1776 allows attackers to bypass virus protection using a Word Macro virus disguised with .nch or .dbx file extensions.
As a workaround for CVE-2002-1776, users should avoid opening documents with .nch or .dbx extensions and enable macro protection features.