Vulnerability in Symantec Antivirus Scan Engine
CVE-2005-1346
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
EPSS: 0.015 (71.5th percentile) — read the EPSS interpretation.
Affected products
- Symantec Antivirus_scan_engine — versions 4.3.7.27
- Symantec Mail_security — versions 4.0.5.66, 4.5.4.743
- Symantec Norton_antivirus — versions 2005_11.0.0
- Symantec Norton_internet_security — versions 2005_contains_nav_11.0.0
- Symantec Norton_system_works — versions 2005_contains_nav_11.0.0
- Symantec Symav_filter_domino_nt — versions 3.1.1.87
- Symantec Web_security — versions 3.0.1.72
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)