CVE-2005-0249

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

7.5 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
http://securitytracker.com/id?1013133 Third Party Advisory VDB Entry
http://www.kb.cert.org/vuls/id/107822 Patch Third Party Advisory US Government Resource
http://www.symantec.com/avcenter/security/Content/2005.02.08.html Patch Vendor Advisory
http://xforce.iss.net/xforce/alerts/id/187 Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18869 VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*
cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*
cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*
cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:*
cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:*
cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:*
cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*
cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:*
cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:*
cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:*
cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*
cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*
History

No history.

Information

Published : 2005-02-08 05:00

Updated : 2023-12-10 10:28

NVD link : CVE-2005-0249

Mitre link : CVE-2005-0249

CVE.ORG link : CVE-2005-0249

JSON object : View

Products Affected

symantec

  • gateway_security
  • sav_filter_domino_nt_ports
  • web_security
  • mail_security
  • brightmail_antispam
  • client_security
  • norton_internet_security
  • norton_system_works
  • norton_antivirus
  • sav_filter_for_domino_nt
  • antivirus_scan_engine
CWE
NVD-CWE-Other