CVE-2005-2758: Buffer Overflow
First published: Wed Oct 05 2005(Updated: )
Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec AntiVirus Scan Engine | =4.3 | |
| Symantec AntiVirus Scan Engine | =4.3 | |
| Symantec AntiVirus Scan Engine | =4.0 | |
| Symantec AntiVirus Scan Engine | =4.0 | |
| Symantec Antivirus Scan Engine For Network Attached Storage | =4.3 | |
| Symantec AntiVirus Scan Engine | =4.0 | |
| Symantec AntiVirus Scan Engine | =4.0 | |
| Symantec AntiVirus Scan Engine | =4.3 | |
| Symantec AntiVirus Scan Engine | =4.0 | |
| Symantec AntiVirus Scan Engine | =4.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities
- http://www.symantec.com/avcenter/security/Content/2005.10.04.html
- http://www.kb.cert.org/vuls/id/849209
- http://securitytracker.com/id?1015001
- http://www.securityfocus.com/bid/15001
- http://secunia.com/advisories/17049
- http://www.osvdb.org/19854
- http://securityreason.com/securityalert/48
- http://www.vupen.com/english/advisories/2005/1954
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22519
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec antivirus scan engine
- version/symantec antivirus scan engine/4.3
- version/symantec antivirus scan engine/4.0
- canonical/symantec antivirus scan engine for network attached storage
- version/symantec antivirus scan engine for network attached storage/4.3