CVE-2007-3699: Critical severity Symantec AntiVirus Scan Engine vulnerability

Published Oct 5, 2007
·
Updated

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACKSIZE field of a RAR archive file header.

Affected Software

168 affected components
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.0
Symantec AntiVirus Scan Engine=4.1
Symantec AntiVirus Scan Engine=4.1.8
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3
Symantec AntiVirus Scan Engine=4.3.3
Symantec AntiVirus Scan Engine=4.3.7.27
Symantec AntiVirus Scan Engine=4.3.8.29
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=4.3.12
Symantec AntiVirus Scan Engine=5.0
Symantec AntiVirus Scan Engine=5.0.1
Symantec Brightmail AntiSpam=4.0
Symantec Brightmail AntiSpam=5.5
Symantec Brightmail AntiSpam=6.0
Symantec Brightmail AntiSpam=6.0.1
Symantec Brightmail AntiSpam=6.0.2
Symantec Brightmail AntiSpam=6.0.3
Symantec Brightmail AntiSpam=6.0.4
Symantec Client Security=2.0
Symantec Client Security=2.0
Symantec Client Security=2.0-build_9.0.0.338
Symantec Client Security=2.0.1_build_9.0.1.1000-mr1
Symantec Client Security=2.0.2_build_9.0.2.1000-mr2
Symantec Client Security=2.0.3_build_9.0.3.1000-mr3
Symantec Client Security=2.0.4
Symantec Client Security=2.0.4-mr4_build1000
Symantec Client Security=2.0.5_build_1100_mp1-mr5
Symantec Client Security=2.0.6-mr6
Symantec Client Security=3.0
Symantec Client Security=3.0.0.359
Symantec Client Security=3.0.1.1000
Symantec Client Security=3.0.1.1001
Symantec Client Security=3.0.1.1007
Symantec Client Security=3.0.1.1008
Symantec Client Security=3.0.2.2000
Symantec Client Security=3.0.2.2001
Symantec Client Security=3.0.2.2002
Symantec Client Security=3.0.2.2010
Symantec Client Security=3.0.2.2011
Symantec Client Security=3.0.2.2020
Symantec Client Security=3.0.2.2021
Symantec Client Security=3.1
Symantec Client Security=3.1.394
Symantec Client Security=3.1.396
Symantec Client Security=3.1.400
Symantec Client Security=3.1.401
Symantec Mail Security=4.0
Symantec Mail Security=4.0
Symantec Mail Security=4.0-build456
Symantec Mail Security=4.0-build463
Symantec Mail Security=4.0-build465
Symantec Mail Security=4.0-build736
Symantec Mail Security=4.0-build741
Symantec Mail Security=4.0-build743
Symantec Mail Security=4.0.1
Symantec Mail Security=4.1-build458
Symantec Mail Security=4.1-build459
Symantec Mail Security=4.1-build461
Symantec Mail Security=4.5
Symantec Mail Security=4.5.4.743
Symantec Mail Security=4.5_build_719
Symantec Mail Security=4.5_build_736
Symantec Mail Security=4.5_build_741
Symantec Mail Security=4.6.1.107
Symantec Mail Security=4.6.3
Symantec Mail Security=4.6_build_97
Symantec Mail Security=5.0
Symantec Mail Security=5.0
Symantec Mail Security=5.0.0.204
Symantec Mail Security=5.0.1
Symantec Mail Security=5.1.0
Symantec Mail Security=6.0.0
Symantec Norton Antivirus
Symantec Norton Antivirus=9.0
Symantec Norton Antivirus=9.0
Symantec Norton Antivirus=9.0.0
Symantec Norton Antivirus=9.0.0.338
Symantec Norton Antivirus=9.0.1
Symantec Norton Antivirus=9.0.1.1.1000
Symantec Norton Antivirus=9.0.2
Symantec Norton Antivirus=9.0.2.1000
Symantec Norton Antivirus=9.0.3
Symantec Norton Antivirus=9.0.3.1000
Symantec Norton Antivirus=9.0.4
Symantec Norton Antivirus=9.0.4-mr4_build_1000
Symantec Norton Antivirus=9.0.5
Symantec Norton Antivirus=9.0.5.1100
Symantec Norton Antivirus=9.0.6.1000
Symantec Norton Antivirus=10.0
Symantec Norton Antivirus=10.0
Symantec Norton Antivirus=10.0.0
Symantec Norton Antivirus=10.0.0.359
Symantec Norton Antivirus=10.0.1
Symantec Norton Antivirus=10.0.1.1000
Symantec Norton Antivirus=10.0.1.1007
Symantec Norton Antivirus=10.0.1.1008
Symantec Norton Antivirus=10.0.2.2000
Symantec Norton Antivirus=10.0.2.2001
Symantec Norton Antivirus=10.0.2.2002
Symantec Norton Antivirus=10.0.2.2010
Symantec Norton Antivirus=10.0.2.2011
Symantec Norton Antivirus=10.0.2.2020
Symantec Norton Antivirus=10.0.2.2021
Symantec Norton Antivirus=10.1
Symantec Norton Antivirus=10.1.4
Symantec Norton Antivirus=10.1.4-mr4_mp1_build4010
Symantec Norton Antivirus=10.1.4.4010
Symantec Norton Antivirus=10.1.394
Symantec Norton Antivirus=10.1.396
Symantec Norton Antivirus=10.1.400
Symantec Norton Antivirus=10.1.401
Symantec Norton Antivirus=10.9.1
Symantec Norton Antivirus=2004
Symantec Norton Antivirus=2004
Symantec Norton Antivirus=2005
Symantec Norton Antivirus=2005
Symantec Norton Antivirus=2005-11.0
Symantec Norton Antivirus=2005-11.0.9
Symantec Norton Antivirus=2006
Symantec Norton Internet Security=3.0
Symantec Norton Internet Security=2004
Symantec Norton Internet Security=2004
Symantec Norton Internet Security=2005
Symantec Norton Internet Security=2005
Symantec Norton Internet Security=2005-11.0
Symantec Norton Internet Security=2005-11.0.9
Symantec Norton Internet Security=2005-11.5.6.14
Symantec Norton Internet Security=2006
Symantec Norton Internet Security=2006
Symantec Norton Personal Firewall=2006
Symantec Norton Personal Firewall=2006_9.1.0.33
Symantec Norton Personal Firewall=2006_9.1.1.7
Symantec Norton System Works=3.0
Symantec Norton System Works=2004
Symantec Norton System Works=2005
Symantec Norton System Works=2005
Symantec Norton System Works=2005-11.0
Symantec Norton System Works=2005-11.0.9
Symantec Norton System Works=2006
Symantec Symantec Antivirus Filtering \+for Domino=3.0.12
Symantec Web Security=2.5
Symantec Web Security=3.0
Symantec Web Security=3.0.1
Symantec Web Security=3.0.1.70
Symantec Web Security=3.0.1.76
Symantec Web Security=3.0.1_build_3.01.70
Symantec Web Security=3.0.1_build_3.01.72
Symantec Web Security=3.0.1_build_3.01.74
Symantec Web Security=3.01.59
Symantec Web Security=3.01.60
Symantec Web Security=3.01.61
Symantec Web Security=3.01.62
Symantec Web Security=3.01.63
Symantec Web Security=3.01.67
Symantec Web Security=3.01.68
Symantec Web Security=5.0
Symantec Gateway Security 5000 Series=3.0.1
Symantec Gateway Security 5400=2.0.1
Symantec Mail Security 8820 Appliance

Remediation

Patch Available

http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html

Event History

Oct 5, 2007
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2007-3699?

CVE-2007-3699 is classified as a denial of service vulnerability that can lead to an infinite loop in the affected software.

2

How do I fix CVE-2007-3699?

To mitigate CVE-2007-3699, ensure that you are using an updated version of the Symantec products that have patched this vulnerability.

3

Which Symantec products are affected by CVE-2007-3699?

CVE-2007-3699 affects multiple versions of the Symantec Antivirus Scan Engine, Brightmail AntiSpam, and Mail Security, among others.

4

Can CVE-2007-3699 be exploited remotely?

Yes, CVE-2007-3699 can be exploited remotely by attackers sending specially crafted RAR archive files.

5

What impact does CVE-2007-3699 have on systems?

The impact of CVE-2007-3699 is a denial of service condition, potentially causing the affected software to become unresponsive.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203