CVE-2010-0107: Buffer Overflow
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0107?
CVE-2010-0107 is classified as a high severity vulnerability due to its ability to cause a denial of service.
How do I fix CVE-2010-0107?
To fix CVE-2010-0107, ensure that you update your Symantec product to the latest version available that addresses this vulnerability.
Which products are affected by CVE-2010-0107?
CVE-2010-0107 affects specific versions of Symantec Norton 360, Norton Internet Security, Norton Antivirus, and Symantec Client Security.
What type of attack can exploit CVE-2010-0107?
CVE-2010-0107 can be exploited by remote attackers to execute a buffer overflow, potentially leading to service crashes.
Is there a workaround for CVE-2010-0107?
Currently, the best workaround for CVE-2010-0107 is to disable the affected ActiveX control until the software can be updated.