Vulnerability in Symantec Norton_internet_security
CVE-2007-1689
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
EPSS: 0.644 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Symantec Norton_internet_security — versions 2004
- Symantec Norton_personal_firewall — versions 2004
- N/a — versions n/a
Public proof-of-concept exploits
References
- cret@cert.org (vdb-entry, x_refsource_VUPEN)
- cret@cert.org (x_refsource_CONFIRM, Patch, Vendor Advisory)
- cret@cert.org (vdb-entry, x_refsource_BID)
- cret@cert.org (x_refsource_OSVDB, vdb-entry)
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (vdb-entry, x_refsource_XF)
- cret@cert.org (mailing-list, x_refsource_BUGTRAQ)
Frequently asked questions
- What is CVE-2007-1689?
- CVE-2007-1689 is a vulnerability in Symantec Norton_internet_security. Published 2007-05-16.
- Is CVE-2007-1689 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.