CVE-2007-2955: Input Validation
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2955?
CVE-2007-2955 has been classified as a critical vulnerability due to its potential to allow remote code execution.
What types of software are affected by CVE-2007-2955?
CVE-2007-2955 affects multiple ActiveX controls in Norton AntiVirus, Internet Security, and System Works products from 2005 and 2006.
How can I fix CVE-2007-2955?
To remediate CVE-2007-2955, users should update their affected Symantec products to the latest versions provided by the vendor.
What potential risks does CVE-2007-2955 pose to users?
CVE-2007-2955 poses the risk of allowing remote attackers to execute arbitrary code on affected systems.
Is there a workaround for CVE-2007-2955?
A common workaround for CVE-2007-2955 is to disable or uninstall the vulnerable ActiveX controls until a patch can be applied.