Symantec Norton Antivirus Denial Of Service Vulnerability

Bugtraq ID:	10686
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 09 2004 12:00AM
Updated:	Jul 09 2004 12:00AM
Credit:	Discovery of this vulnerability is credited to bipin gautam <[email protected]>
Vulnerable:	Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton AntiVirus 2002 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional
Not Vulnerable:

Symantec Norton Antivirus Denial Of Service Vulnerability

It is reported that Symantec Norton AntiVirus is prone to a denial of service vulnerability. The issue is reported to present itself if the vulnerable software scans a compressed archive that contains a malicious executable contained in over 49647 directories. When an archive of this type is scanned, the affected software will reportedly consume system resources. This may impact performance, ultimately denying service to legitimate users.

Symantec Norton Antivirus Denial Of Service Vulnerability

The is no exploit required.

Symantec Norton Antivirus Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Symantec Norton Antivirus Denial Of Service Vulnerability

References:

• Symantec Homepage (Symantec)
  
• RE: Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] (Sym Security )