critical
9.3
CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2007-3699

First published: Fri Oct 05 2007(Updated: )

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.0
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.0
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.1
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.1.8
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.3
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.7.27
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.8.29
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=4.3.12
Symantec Antivirus Scan Engine for Microsoft SharePoint=5.0
Symantec Antivirus Scan Engine for Microsoft SharePoint=5.0.1
Symantec Brightmail AntiSpam=4.0
Symantec Brightmail AntiSpam=5.5
Symantec Brightmail AntiSpam=6.0
Symantec Brightmail AntiSpam=6.0.1
Symantec Brightmail AntiSpam=6.0.2
Symantec Brightmail AntiSpam=6.0.3
Symantec Brightmail AntiSpam=6.0.4
Symantec Client Security=2.0
Symantec Client Security=2.0
Symantec Client Security=2.0-build_9.0.0.338
Symantec Client Security=2.0.1_build_9.0.1.1000-mr1
Symantec Client Security=2.0.2_build_9.0.2.1000-mr2
Symantec Client Security=2.0.3_build_9.0.3.1000-mr3
Symantec Client Security=2.0.4
Symantec Client Security=2.0.4-mr4_build1000
Symantec Client Security=2.0.5_build_1100_mp1-mr5
Symantec Client Security=2.0.6-mr6
Symantec Client Security=3.0
Symantec Client Security=3.0.0.359
Symantec Client Security=3.0.1.1000
Symantec Client Security=3.0.1.1001
Symantec Client Security=3.0.1.1007
Symantec Client Security=3.0.1.1008
Symantec Client Security=3.0.2.2000
Symantec Client Security=3.0.2.2001
Symantec Client Security=3.0.2.2002
Symantec Client Security=3.0.2.2010
Symantec Client Security=3.0.2.2011
Symantec Client Security=3.0.2.2020
Symantec Client Security=3.0.2.2021
Symantec Client Security=3.1
Symantec Client Security=3.1.394
Symantec Client Security=3.1.396
Symantec Client Security=3.1.400
Symantec Client Security=3.1.401
Symantec Mail Security=4.0
Symantec Mail Security=4.0
Symantec Mail Security=4.0-build456
Symantec Mail Security=4.0-build463
Symantec Mail Security=4.0-build465
Symantec Mail Security=4.0-build736
Symantec Mail Security=4.0-build741
Symantec Mail Security=4.0-build743
Symantec Mail Security=4.0.1
Symantec Mail Security=4.1-build458
Symantec Mail Security=4.1-build459
Symantec Mail Security=4.1-build461
Symantec Mail Security=4.5
Symantec Mail Security=4.5.4.743
Symantec Mail Security=4.5_build_719
Symantec Mail Security=4.5_build_736
Symantec Mail Security=4.5_build_741
Symantec Mail Security=4.6.1.107
Symantec Mail Security=4.6.3
Symantec Mail Security=4.6_build_97
Symantec Mail Security=5.0
Symantec Mail Security=5.0
Symantec Mail Security=5.0.0.204
Symantec Mail Security=5.0.1
Symantec Mail Security=5.1.0
Symantec Mail Security=6.0.0
Symantec Norton Antivirus with Backup
Symantec Norton Antivirus with Backup=9.0
Symantec Norton Antivirus with Backup=9.0
Symantec Norton Antivirus with Backup=9.0.0
Symantec Norton Antivirus with Backup=9.0.0.338
Symantec Norton Antivirus with Backup=9.0.1
Symantec Norton Antivirus with Backup=9.0.1.1.1000
Symantec Norton Antivirus with Backup=9.0.2
Symantec Norton Antivirus with Backup=9.0.2.1000
Symantec Norton Antivirus with Backup=9.0.3
Symantec Norton Antivirus with Backup=9.0.3.1000
Symantec Norton Antivirus with Backup=9.0.4
Symantec Norton Antivirus with Backup=9.0.4-mr4_build_1000
Symantec Norton Antivirus with Backup=9.0.5
Symantec Norton Antivirus with Backup=9.0.5.1100
Symantec Norton Antivirus with Backup=9.0.6.1000
Symantec Norton Antivirus with Backup=10.0
Symantec Norton Antivirus with Backup=10.0
Symantec Norton Antivirus with Backup=10.0.0
Symantec Norton Antivirus with Backup=10.0.0.359
Symantec Norton Antivirus with Backup=10.0.1
Symantec Norton Antivirus with Backup=10.0.1.1000
Symantec Norton Antivirus with Backup=10.0.1.1007
Symantec Norton Antivirus with Backup=10.0.1.1008
Symantec Norton Antivirus with Backup=10.0.2.2000
Symantec Norton Antivirus with Backup=10.0.2.2001
Symantec Norton Antivirus with Backup=10.0.2.2002
Symantec Norton Antivirus with Backup=10.0.2.2010
Symantec Norton Antivirus with Backup=10.0.2.2011
Symantec Norton Antivirus with Backup=10.0.2.2020
Symantec Norton Antivirus with Backup=10.0.2.2021
Symantec Norton Antivirus with Backup=10.1
Symantec Norton Antivirus with Backup=10.1.4
Symantec Norton Antivirus with Backup=10.1.4-mr4_mp1_build4010
Symantec Norton Antivirus with Backup=10.1.4.4010
Symantec Norton Antivirus with Backup=10.1.394
Symantec Norton Antivirus with Backup=10.1.396
Symantec Norton Antivirus with Backup=10.1.400
Symantec Norton Antivirus with Backup=10.1.401
Symantec Norton Antivirus with Backup=10.9.1
Symantec Norton Antivirus with Backup=2004
Symantec Norton Antivirus with Backup=2004
Symantec Norton Antivirus with Backup=2005
Symantec Norton Antivirus with Backup=2005
Symantec Norton Antivirus with Backup=2005-11.0
Symantec Norton Antivirus with Backup=2005-11.0.9
Symantec Norton Antivirus with Backup=2006
Symantec Norton Internet Security=3.0
Symantec Norton Internet Security=2004
Symantec Norton Internet Security=2004
Symantec Norton Internet Security=2005
Symantec Norton Internet Security=2005
Symantec Norton Internet Security=2005-11.0
Symantec Norton Internet Security=2005-11.0.9
Symantec Norton Internet Security=2005-11.5.6.14
Symantec Norton Internet Security=2006
Symantec Norton Internet Security=2006
Symantec Norton Personal Firewall=2006
Symantec Norton Personal Firewall=2006_9.1.0.33
Symantec Norton Personal Firewall=2006_9.1.1.7
Symantec Norton System Works=3.0
Symantec Norton System Works=2004
Symantec Norton System Works=2005
Symantec Norton System Works=2005
Symantec Norton System Works=2005-11.0
Symantec Norton System Works=2005-11.0.9
Symantec Norton System Works=2006
Symantec Antivirus Filtering for Domino=3.0.12
Symantec Web Security=2.5
Symantec Web Security=3.0
Symantec Web Security=3.0.1
Symantec Web Security=3.0.1.70
Symantec Web Security=3.0.1.76
Symantec Web Security=3.0.1_build_3.01.70
Symantec Web Security=3.0.1_build_3.01.72
Symantec Web Security=3.0.1_build_3.01.74
Symantec Web Security=3.01.59
Symantec Web Security=3.01.60
Symantec Web Security=3.01.61
Symantec Web Security=3.01.62
Symantec Web Security=3.01.63
Symantec Web Security=3.01.67
Symantec Web Security=3.01.68
Symantec Web Security=5.0
Symantec Gateway Security=3.0.1
Symantec Gateway Security 5400=2.0.1
Symantec Mail Security Appliance

Remedy

http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-3699?

    CVE-2007-3699 is classified as a denial of service vulnerability that can lead to an infinite loop in the affected software.

  • How do I fix CVE-2007-3699?

    To mitigate CVE-2007-3699, ensure that you are using an updated version of the Symantec products that have patched this vulnerability.

  • Which Symantec products are affected by CVE-2007-3699?

    CVE-2007-3699 affects multiple versions of the Symantec Antivirus Scan Engine, Brightmail AntiSpam, and Mail Security, among others.

  • Can CVE-2007-3699 be exploited remotely?

    Yes, CVE-2007-3699 can be exploited remotely by attackers sending specially crafted RAR archive files.

  • What impact does CVE-2007-3699 have on systems?

    The impact of CVE-2007-3699 is a denial of service condition, potentially causing the affected software to become unresponsive.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203