First published: Tue Mar 29 2005(Updated: )
The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service (CPU consumption and system crash) by renaming a file on a network share.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Norton Internet Security | =2004 | |
Symantec Norton System Works | =2004_professional | |
Symantec Norton Antivirus with Backup | =2.1 | |
Symantec Norton System Works | =2005_premier | |
Symantec Norton Antivirus with Backup | =2005 | |
Symantec Norton Internet Security | =2005 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0923 has a moderate severity level due to its ability to cause denial of service by affecting CPU consumption and system stability.
To mitigate CVE-2005-0923, it is recommended to update to the latest version of the affected Symantec software that addresses this vulnerability.
CVE-2005-0923 affects Symantec Norton AntiVirus 2004 and 2005, Norton Internet Security 2004 and 2005, and Norton System Works 2004 and 2005.
CVE-2005-0923 enables attackers to perform a denial of service attack, which can lead to CPU exhaustion and crashes on the targeted systems.
While CVE-2005-0923 was identified in 2005, it remains a concern for users who have not updated their vulnerable software versions.