CVE-2007-3021
First published: Tue Jun 05 2007(Updated: )
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Norton AntiVirus | =10.1 | |
| Symantec Norton AntiVirus | =10.1.400 | |
| Symantec Norton AntiVirus | =10.1.401 | |
| Symantec Client Security | =3.1.396 | |
| Symantec Norton AntiVirus | =10.1.396 | |
| Symantec Client Security | =3.1.401 | |
| Symantec Client Security | =3.1.400 | |
| Symantec Reporting Server | <=1.0.197.0 | |
| Symantec Client Security | =3.1 | |
| Symantec Client Security | =3.1.394 | |
| Symantec Norton AntiVirus | =10.0.2.2021 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.symantec.com/avcenter/security/Content/2007.06.05a.html
- http://www.securityfocus.com/bid/24313
- http://www.securitytracker.com/id?1018196
- http://secunia.com/advisories/25543
- http://www.vupen.com/english/advisories/2007/2074
- http://osvdb.org/36109
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34744
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/references
- agent/weakness
- agent/softwarecombine
- agent/remedy
- agent/description
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/symantec
- canonical/symantec norton antivirus
- version/symantec norton antivirus/10.1
- version/symantec norton antivirus/10.1.400
- version/symantec norton antivirus/10.1.401
- canonical/symantec client security
- version/symantec client security/3.1.396
- version/symantec norton antivirus/10.1.396
- version/symantec client security/3.1.401
- version/symantec client security/3.1.400
- canonical/symantec reporting server
- version/symantec reporting server/1.0.197.0
- version/symantec client security/3.1
- version/symantec client security/3.1.394
- version/symantec norton antivirus/10.0.2.2021