CVE-2009-1428: XSS
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1428?
CVE-2009-1428 is considered to be a moderate severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2009-1428?
To fix CVE-2009-1428, users should update their Symantec products to versions that are patched against this vulnerability.
What does CVE-2009-1428 exploit?
CVE-2009-1428 exploits multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe used in various Symantec products.
Which software is affected by CVE-2009-1428?
CVE-2009-1428 affects multiple versions of Symantec AntiVirus, Symantec Endpoint Protection, Norton 360, and Norton Internet Security.
Can CVE-2009-1428 allow remote code execution?
CVE-2009-1428 does not directly allow remote code execution, but it can be leveraged to manipulate user sessions through XSS.