Vulnerability in Symantec Norton Antivirus
CVE-2002-1775
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.026 (84.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 84.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.026 · newest: 0.026 · change: 0.000
Affected products
- Symantec Norton Antivirus — versions 2002
Public proof-of-concept exploits
References
- online.securityfocus.com/archive/1/260678 (mailing-list)
- www.securityfocus.com/bid/4243 (vdb-entry)
- online.securityfocus.com/archive/1/260271 (mailing-list)
- exchange.xforce.ibmcloud.com/vulnerabilities/8390 (vdb-entry)
Frequently asked questions
- What is CVE-2002-1775?
- CVE-2002-1775 is a vulnerability in Symantec Norton Antivirus. Published 2002-12-31.
- Is CVE-2002-1775 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.