CVE-2008-0312: Buffer Overflow
Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method. NOTE: some of these details are obtained from third party information.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0312?
CVE-2008-0312 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-0312?
To fix CVE-2008-0312, users should update their affected Symantec Norton products to the latest versions provided by Symantec.
Which Symantec products are affected by CVE-2008-0312?
CVE-2008-0312 affects multiple Symantec Norton products including Norton 360 1.0, Norton Antivirus 2006 through 2008, and Norton Internet Security 2006 through 2008.
What type of attack does CVE-2008-0312 enable?
CVE-2008-0312 enables remote attackers to execute arbitrary code on the affected systems.
Is CVE-2008-0312 specific to a particular operating system?
No, CVE-2008-0312 is not specific to a particular operating system as it affects various versions of Symantec Norton products running on Windows.