XSS in Symantec Antivirus
CVE-2009-1428
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Intern…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.023 (81.6th percentile) — read the EPSS interpretation.
Affected products
- Symantec Antivirus — versions 10.0, 10.0.1, 10.0.1.1
- Symantec Endpoint_protection — versions 11.0
- Symantec Norton_360 — versions 1.0
- Symantec Norton_internet_security — versions 2005, 2005_contains_nav_11.0.0, 2006
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)