CVE-2007-0447: Buffer Overflow

Published Oct 5, 2007
·
Updated

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

Affected Software

168 affected components
Symantec Mail Security=4.0-build741
Symantec Client Security=3.0
Symantec Norton Antivirus=10.0.2.2011
Symantec Norton Antivirus=2004
Symantec Norton Internet Security=2006
Symantec Norton Internet Security=2004
Symantec AntiVirus Scan Engine=5.0
Symantec Norton Antivirus=9.0.1.1.1000
Symantec Web Security=3.0.1_build_3.01.74
Symantec Norton Antivirus=10.0.2.2001
Symantec Norton Antivirus=9.0.0
Symantec Mail Security=5.0
Symantec Brightmail AntiSpam=6.0.2
Symantec Norton Antivirus=2005-11.0.9
Symantec Norton Antivirus=10.0.1.1008
Symantec AntiVirus Scan Engine=4.3
Symantec Norton Antivirus=10.1
Symantec Web Security=2.5
Symantec Norton Antivirus=9.0.2
Symantec AntiVirus Scan Engine=4.3
Symantec Norton Internet Security=2005-11.5.6.14
Symantec Norton System Works=2005
Symantec Brightmail AntiSpam=6.0.3
Symantec Client Security=3.0.2.2020
Symantec Norton Antivirus=10.1.396
Symantec Client Security=2.0.6-mr6
Symantec Norton Antivirus=10.0.1.1000
Symantec Norton Antivirus=10.0.0
Symantec Norton Antivirus=9.0.3
Symantec AntiVirus Scan Engine=4.3
Symantec Client Security=2.0-build_9.0.0.338
Symantec Client Security=3.0.2.2021
Symantec Client Security=2.0.1_build_9.0.1.1000-mr1
Symantec Mail Security=4.0-build743
Symantec Norton Internet Security=2004
Symantec Mail Security=4.0.1
Symantec Client Security=2.0.3_build_9.0.3.1000-mr3
Symantec Mail Security=4.0-build465
Symantec Norton Antivirus=10.0.1
Symantec Mail Security=4.5_build_736
Symantec Mail Security=5.0.1
Symantec Norton Antivirus=10.0.2.2010
Symantec Client Security=3.0.1.1000
Symantec AntiVirus Scan Engine=4.3.12
Symantec Web Security=3.0.1_build_3.01.70
Symantec Client Security=2.0.4
Symantec Web Security=3.01.62
Symantec AntiVirus Scan Engine=4.3.12
Symantec Symantec Antivirus Filtering \+for Domino=3.0.12
Symantec Mail Security=4.5
Symantec Norton Antivirus=10.0
Symantec Norton Antivirus=9.0.0.338
Symantec Web Security=3.0.1.70
Symantec Mail Security=4.1-build458
Symantec Client Security=3.0.2.2002
Symantec Client Security=3.0.1.1008
Symantec Norton Antivirus
Symantec Web Security=3.01.61
Symantec Norton Antivirus=9.0.6.1000
Symantec Norton Antivirus=9.0.2.1000
Symantec Norton Antivirus=10.1.4-mr4_mp1_build4010
Symantec Web Security=3.0
Symantec AntiVirus Scan Engine=4.3.7.27
Symantec Norton System Works=2006
Symantec Norton Antivirus=10.1.401
Symantec Client Security=3.0.2.2011
Symantec Norton Internet Security=2005
Symantec AntiVirus Scan Engine=4.3.12
Symantec Mail Security=4.6_build_97
Symantec Norton Antivirus=10.1.400
Symantec Web Security=5.0
Symantec Client Security=2.0.4-mr4_build1000
Symantec Norton Personal Firewall=2006_9.1.0.33
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.3.3
Symantec Client Security=3.1.396
Symantec Web Security=3.01.68
Symantec Norton System Works=3.0
Symantec Norton Antivirus=10.0.2.2020
Symantec Norton Internet Security=2005-11.0.9
Symantec Client Security=2.0
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=5.0.1
Symantec Client Security=2.0.5_build_1100_mp1-mr5
Symantec Norton Antivirus=10.0.1.1007
Symantec Norton Antivirus=10.1.4
Symantec Mail Security=4.0-build456
Symantec Web Security=3.01.60
Symantec Client Security=3.0.1.1001
Symantec Client Security=3.0.2.2001
Symantec Brightmail AntiSpam=6.0
Symantec Mail Security=4.0-build463
Symantec AntiVirus Scan Engine=4.3.8.29
Symantec Norton Antivirus=10.0
Symantec Brightmail AntiSpam=5.5
Symantec Norton Antivirus=9.0.5.1100
Symantec Mail Security=5.0.0.204
Symantec AntiVirus Scan Engine=4.1
Symantec Norton Internet Security=2005-11.0
Symantec Web Security=3.0.1
Symantec Web Security=3.0.1_build_3.01.72
Symantec AntiVirus Scan Engine=4.3.12
Symantec Mail Security=5.1.0
Symantec Mail Security=4.1-build461
Symantec Web Security=3.01.67
Symantec Norton Antivirus=2006
Symantec Norton Antivirus=10.0.2.2000
Symantec Norton Antivirus=10.1.394
Symantec Mail Security=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec Client Security=2.0
Symantec Mail Security=4.6.1.107
Symantec Norton Antivirus=2005-11.0
Symantec Norton Antivirus=9.0.3.1000
Symantec Norton Personal Firewall=2006
Symantec Client Security=3.1.401
Symantec Norton Antivirus=9.0.4-mr4_build_1000
Symantec Web Security=3.01.63
Symantec Norton Antivirus=10.0.2.2002
Symantec Norton Antivirus=10.9.1
Symantec Client Security=3.0.0.359
Symantec Mail Security=4.6.3
Symantec Norton Internet Security=2006
Symantec Client Security=3.1.400
Symantec Client Security=3.0.2.2010
Symantec Norton Antivirus=9.0.1
Symantec Mail Security=4.1-build459
Symantec Norton Antivirus=9.0.4
Symantec Client Security=3.1
Symantec Norton Antivirus=2004
Symantec AntiVirus Scan Engine=4.1.8
Symantec Mail Security=5.0
Symantec AntiVirus Scan Engine=4.3
Symantec Norton Antivirus=10.0.2.2021
Symantec Norton Antivirus=2005
Symantec Norton System Works=2004
Symantec Norton Personal Firewall=2006_9.1.1.7
Symantec Web Security=3.01.59
Symantec Norton Antivirus=10.0.0.359
Symantec Client Security=3.0.2.2000
Symantec Client Security=3.1.394
Symantec Norton Internet Security=2005
Symantec Norton Antivirus=2005
Symantec AntiVirus Scan Engine=4.3
Symantec Mail Security=4.5_build_719
Symantec Norton System Works=2005-11.0
Symantec Norton Internet Security=3.0
Symantec Norton System Works=2005
Symantec Client Security=3.0.1.1007
Symantec Mail Security=6.0.0
Symantec Norton Antivirus=9.0.5
Symantec Brightmail AntiSpam=4.0
Symantec Mail Security=4.0
Symantec Norton Antivirus=9.0
Symantec Norton Antivirus=9.0
Symantec AntiVirus Scan Engine=4.3.12
Symantec Norton Antivirus=10.1.4.4010
Symantec Norton System Works=2005-11.0.9
Symantec Brightmail AntiSpam=6.0.4
Symantec Mail Security=4.5_build_741
Symantec Mail Security=4.0-build736
Symantec Brightmail AntiSpam=6.0.1
Symantec Web Security=3.0.1.76
Symantec Client Security=2.0.2_build_9.0.2.1000-mr2
Symantec Mail Security=4.5.4.743
Symantec Gateway Security 5400=2.0.1
Symantec Mail Security 8820 Appliance
Symantec Gateway Security 5000 Series=3.0.1

Remediation

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html

Event History

Oct 5, 2007
CVE Published
09:17 PM
Oct 6, 2007
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-0447?

CVE-2007-0447 is rated as high severity due to its potential to allow remote attackers to execute arbitrary code.

2

How do I fix CVE-2007-0447?

To fix CVE-2007-0447, update to the latest version of the affected Symantec products as recommended by Symantec.

3

Which Symantec products are affected by CVE-2007-0447?

CVE-2007-0447 affects multiple Symantec products including Symantec Mail Security, Norton Antivirus, and Symantec Client Security.

4

What type of vulnerability is CVE-2007-0447?

CVE-2007-0447 is a heap-based buffer overflow vulnerability.

5

Can CVE-2007-0447 be exploited remotely?

Yes, CVE-2007-0447 can be exploited remotely through specially crafted CAB files.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203