CVE-2005-2758: Buffer Overflow
Published Oct 5, 2005
·Updated
Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.
Affected Software
10 affected components
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec Antivirus Scan Engine For Network Attached Storage=4.3
Remediation
Event History
Oct 5, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2758?
CVE-2005-2758 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2005-2758?
To fix CVE-2005-2758, upgrade to a patched version of the Symantec AntiVirus Scan Engine that addresses this vulnerability.
3
What versions of Symantec AntiVirus are affected by CVE-2005-2758?
CVE-2005-2758 affects versions 4.0 and 4.3 of the Symantec AntiVirus Scan Engine.
4
Can CVE-2005-2758 be exploited remotely?
Yes, CVE-2005-2758 can be exploited remotely through crafted HTTP headers.
5
What types of attacks does CVE-2005-2758 allow?
CVE-2005-2758 allows attackers to execute arbitrary code due to a heap-based buffer overflow.