Vulnerability in Symantec Norton Antivirus
CVE-2007-2955
Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.8 (Medium). Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.040 (90.2th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 90th percentile — 90.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.040 · newest: 0.040 · change: 0.000
Affected products
- Symantec Norton Antivirus — versions 2006
- Symantec Norton Internet Security — versions 2005, 2006
- Symantec Norton System Works — versions 2006
References
- exchange.xforce.ibmcloud.com/vulnerabilities/35944 (vdb-entry)
- www.symantec.com/avcenter/security/Content/2007.08.09.html
- www.securitytracker.com/id (vdb-entry)
- secunia.com/secunia_research/2007-53/advisory/ (Vendor Advisory)
- www.vupen.com/english/advisories/2007/2822 (vdb-entry)
- secunia.com/advisories/25215 (third-party-advisory)
- www.securitytracker.com/id (vdb-entry)
- www.securityfocus.com/bid/24983 (vdb-entry)
- www.securitytracker.com/id (vdb-entry)