CVE-2002-1777: High severity Symantec Norton Antivirus vulnerability
DISPUTED NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is used by Outlook to obtain the file name. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but Norton AntiVirus or the Office plug-in would detect the virus before it is executed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1777?
CVE-2002-1777 has been classified as a disputed vulnerability, and its severity is subject to debate due to vendor denial.
How do I fix CVE-2002-1777?
To mitigate CVE-2002-1777, it is recommended to upgrade to a later version of Symantec Norton AntiVirus that addresses this vulnerability.
What software is affected by CVE-2002-1777?
CVE-2002-1777 specifically affects Symantec Norton AntiVirus 2002.
Can CVE-2002-1777 be exploited remotely?
Yes, CVE-2002-1777 can be exploited by remote attackers through specific email manipulation.
Is there a patch available for CVE-2002-1777?
There is no specific patch available for CVE-2002-1777; upgrading to a newer version of the software is suggested.