CVE-2004-0363: Buffer Overflow

Published Mar 23, 2004

Updated

Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.

Affected Software

1 affected component

Symantec Norton AntiSpam=2004

Remediation

Patch Available

http://www.nextgenss.com/advisories/antispam.txt

Event History

Mar 23, 2004

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0363?

CVE-2004-0363 is classified as a critical vulnerability due to the potential for remote code execution.

How do I fix CVE-2004-0363?

To fix CVE-2004-0363, it is recommended to update to the latest version of Norton AntiSpam or to uninstall the affected software.

What is CVE-2004-0363?

CVE-2004-0363 is a stack-based buffer overflow vulnerability in the symspam.dll ActiveX component of Norton AntiSpam 2004.

Who is affected by CVE-2004-0363?

Users of Norton AntiSpam 2004, as part of Norton Internet Security 2004, are affected by CVE-2004-0363.

Can CVE-2004-0363 be exploited remotely?

Yes, CVE-2004-0363 can be exploited remotely by attackers through a crafted parameter to the LaunchCustomRuleWizard method.