Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
BID:15971
Info
Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
| Bugtraq ID: | 15971 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 20 2005 12:00AM |
| Updated: | Feb 16 2006 05:02PM |
| Credit: | Discovery is credited to Alex Wheeler. |
| Vulnerable: |
Symantec Web Security 3.0.1 build 3.01.68 Symantec Web Security 3.0.1 build 3.01.67 Symantec Web Security 3.0.1 build 3.01.63 Symantec Web Security 3.0.1 build 3.01.62 Symantec Web Security 3.0.1 build 3.01.61 Symantec Web Security 3.0.1 build 3.01.60 Symantec Web Security 3.0.1 build 3.01.59 Symantec Web Security 3.0.1 build 3.0.1.74 Symantec Web Security 3.0.1 build 3.0.1.72 Symantec Web Security 3.0.1 build 3.0.1.70 Symantec Web Security 3.0.1 .70 Symantec Web Security 3.0.1 Build 62 Symantec Web Security 3.0.1 Symantec Norton SystemWorks 2004 Professional Edition Symantec Norton SystemWorks 2004 Symantec Norton System Works for Macintosh 3.0 Symantec Norton System Works 7.0 for Macintosh Symantec Norton System Works 2006 Symantec Norton System Works 2005 Premier Symantec Norton System Works 2005 11.0.9 Symantec Norton System Works 2005 11.0 Symantec Norton System Works 2005 Premier Symantec Norton System Works 2004 for Macintosh Symantec Norton Personal Firewall for Macintosh 3.1 Symantec Norton Personal Firewall 2006 Symantec Norton Personal Firewall 2005 Symantec Norton Personal Firewall 2004 Symantec Norton Internet Security for Macintosh 3.0 Symantec Norton Internet Security for Macintosh 2.0 Symantec Norton Internet Security 2006 Professional Edition Symantec Norton Internet Security 2005 Professional Edition Symantec Norton Internet Security 2004 Professional Edition Symantec Norton Internet Security 2003 Symantec Norton Internet Security 2002 Professional Edition 0 Symantec Norton Internet Security 2002 0 Symantec Norton Internet Security 2001 Professional Edition Symantec Norton Internet Security 2001 0 Symantec Norton AntiVirus for MS Exchange 2.18.88 Symantec Norton AntiVirus for MS Exchange 2.18.85 Symantec Norton AntiVirus for MS Exchange 2.18.82 Symantec Norton AntiVirus for MS Exchange 2.5 Symantec Norton AntiVirus for MS Exchange 2.1 Symantec Norton AntiVirus for MS Exchange 2.0 Symantec Norton AntiVirus for MS Exchange 1.5 Symantec Norton AntiVirus for Microsoft Exchange 2.18 build 83 Symantec Norton Antivirus for Macintosh Corporate Edition 9.0 Symantec Norton Antivirus for Macintosh 10.9.1 Symantec Norton Antivirus for Macintosh 10.0.1 Symantec Norton Antivirus for Macintosh 10.0 .0 Symantec Norton Antivirus for Macintosh 9.0.3 Symantec Norton Antivirus for Macintosh 9.0.2 Symantec Norton Antivirus for Macintosh 9.0.1 Symantec Norton Antivirus for Macintosh 9.0 .0 Symantec Norton AntiVirus for Internet Email Gateways 1.0 Symantec Norton AntiVirus Corporate Edition 8.0 Symantec Norton AntiVirus Corporate Edition 7.61 Symantec Norton AntiVirus Corporate Edition 7.51 Symantec Norton AntiVirus Corporate Edition 7.6 Symantec Norton AntiVirus Corporate Edition 7.5 Symantec Norton AntiVirus Corporate Edition 7.2 Symantec Norton AntiVirus Corporate Edition 7.0 Symantec Norton AntiVirus Corporate Edition 7.60.build 926 Symantec Norton Antivirus 9.0 for Macintosh Symantec Norton Antivirus 8.0 for Macintosh Symantec Norton Antivirus 7.0 for Macintosh Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Professional Edition Symantec Norton AntiVirus 2005 11.0.9 Symantec Norton AntiVirus 2005 11.0 Symantec Norton AntiVirus 2005 Symantec Norton AntiVirus 2004 Professional Edition Symantec Norton Antivirus 2004 for Macintosh Symantec Norton AntiVirus 2004 Symantec Norton AntiVirus 2003 Professional Edition Symantec Norton Antivirus 2003 0 Symantec Norton AntiVirus 2002 Professional Edition Symantec Norton AntiVirus 2002 0 Symantec Norton AntiVirus 2001 Professional Edition Symantec Norton AntiVirus 2001 0 Symantec Mail Security for SMTP 4.1 Symantec Mail Security for SMTP 4.0.2 Symantec Mail Security for SMTP 4.0 build 4.1.4.30 Symantec Mail Security for SMTP 4.0 build 4.0.5.66 Symantec Mail Security for SMTP 4.0 build 4.0.2 Symantec Mail Security for SMTP 4.0 Symantec Mail Security for Microsoft Exchange 5.0 Symantec Mail Security for Microsoft Exchange 4.6.3 Symantec Mail Security for Microsoft Exchange 4.6 build 97 Symantec Mail Security for Microsoft Exchange 4.6 build 97 Symantec Mail Security for Microsoft Exchange 4.6 build 4.6.1.107 Symantec Mail Security for Microsoft Exchange 4.5 build 719 Symantec Mail Security for Microsoft Exchange 4.5 build 4.5.4.743 Symantec Mail Security for Microsoft Exchange 4.5 build 743 Symantec Mail Security for Microsoft Exchange 4.5 build 741 Symantec Mail Security for Microsoft Exchange 4.5 build 736 Symantec Mail Security for Microsoft Exchange 4.5 Symantec Mail Security for Microsoft Exchange 4.0 build 743 Symantec Mail Security for Microsoft Exchange 4.0 build 741 Symantec Mail Security for Microsoft Exchange 4.0 build 736 Symantec Mail Security for Microsoft Exchange 4.0 build 465 Symantec Mail Security for Microsoft Exchange 4.0 build 463 Symantec Mail Security for Microsoft Exchange 4.0 build 456 Symantec Mail Security for Microsoft Exchange 4.0 build 465 Symantec Mail Security for Microsoft Exchange 4.0 build 463 Symantec Mail Security for Microsoft Exchange 4.0 build 456 Symantec Mail Security for Microsoft Exchange 4.0 Symantec Mail Security for Domino 4.1.4 Symantec Mail Security for Domino 4.1 Symantec Mail Security for Domino 4.1 Symantec Mail Security for Domino 4.0.1 Symantec Mail Security for Domino 4.0 build 4.0.1 Symantec Mail Security for Domino 4.0 build 4.0.1 Symantec Mail Security for Domino 4.0 Symantec Mail Security for Domino 4.0 Symantec I-Gear MS Proxy 3.5 Symantec Gateway Security 5440 Symantec Gateway Security 5400 2.0.1 Symantec Gateway Security 5400 2.0 Symantec Gateway Security 5310 1.0 Symantec Gateway Security 5300 1.0 Symantec Gateway Security 5300 Symantec Gateway Security 5200 1.0 Symantec Gateway Security 5000 Series 3.0 Symantec Gateway Security 400 2.0 Symantec Gateway Security 300 2.0 Symantec Gateway Security 1.0 Symantec Firewall/VPN Appliance 200 Symantec Firewall/VPN Appliance 100 Symantec Enterprise Firewall 8.0 Solaris Symantec Enterprise Firewall 8.0 NT/2000 Symantec Enterprise Firewall 8.0 Symantec Clientless VPN Gateway 4400 Series 5.0 Symantec Client Security for Nokia Communicator Symantec Client Security 3.0 Symantec Client Security 2.0.3 MR3 b9.0.3.1000 Symantec Client Security 2.0.2 MR2 b9.0.2.1000 Symantec Client Security 2.0.1 MR1 b9.0.1.1000 Symantec Client Security 2.0 STM build 9.0.0.338 Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 Symantec Client Security 1.1.1 MR5 build 8.1.1.336 Symantec Client Security 1.1.1 MR4 build 8.1.1.329 Symantec Client Security 1.1.1 MR3 build 8.1.1.323 Symantec Client Security 1.1.1 MR2 build 8.1.1.319 Symantec Client Security 1.1.1 MR1 build 8.1.1.314a Symantec Client Security 1.1.1 MR6 b8.1.1.266 Symantec Client Security 1.1.1 Symantec Client Security 1.1 STM b8.1.0.825a Symantec Client Security 1.1 Symantec Client Security 1.0.1 MR8 build 8.01.471 Symantec Client Security 1.0.1 MR7 build 8.01.464 Symantec Client Security 1.0.1 MR6 build 8.01.460 Symantec Client Security 1.0.1 MR5 build 8.01.457 Symantec Client Security 1.0.1 MR4 build 8.01.446 Symantec Client Security 1.0.1 MR3 build 8.01.434 Symantec Client Security 1.0.1 build 8.01.437 Symantec Client Security 1.0.1 MR9 b8.01.501 Symantec Client Security 1.0.1 MR2 b8.01.429c Symantec Client Security 1.0.1 MR1 b8.01.425a/b Symantec Client Security 1.0.1 Symantec Client Security 1.0 .0 b8.01.9378 Symantec Client Security 1.0 b8.01.9374 Symantec Client Security 1.0 Symantec Brightmail Anti-Spam 6.0.2 Symantec Brightmail Anti-Spam 6.0.1 Symantec Brightmail Anti-Spam 6.0 Symantec Brightmail Anti-Spam 5.5 Symantec Brightmail Anti-Spam 4.0 Symantec AntiVirus/Filtering for Domino Ports 3.0.11 Symantec AntiVirus/Filtering for Domino Ports 3.0 (Solaris)build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (S390) Symantec AntiVirus/Filtering for Domino Ports 3.0 (OS400) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (Linux) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 (AIX) build 3.0.5 Symantec AntiVirus/Filtering for Domino Ports 3.0 Symantec AntiVirus/Filtering for Domino NT 3.1.1 Symantec AntiVirus/Filtering for Domino NT 3.1 build 3.1.1 Symantec AntiVirus/Filtering for Domino NT 3.1 Symantec AntiVirus Scan Engine for Network Attached Storage 4.3.12 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3.12 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Netapp NetCache 4.3 Symantec AntiVirus Scan Engine for Netapp NetCache 4.0 Symantec AntiVirus Scan Engine for Netapp Filer 4.3.12 Symantec AntiVirus Scan Engine for Netapp Filer 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Netapp Filer 4.3 Symantec AntiVirus Scan Engine for Netapp Filer 4.0 Symantec AntiVirus Scan Engine for Microsoft SharePoint 4.3.12 Symantec AntiVirus Scan Engine for Microsoft Portal 4.3 Symantec AntiVirus Scan Engine for Messaging 4.3.12 Symantec AntiVirus Scan Engine for ISA 4.3.12 Symantec AntiVirus Scan Engine for ISA 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for ISA 4.3 Symantec AntiVirus Scan Engine for Filers 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Filers 4.3 Symantec AntiVirus Scan Engine for Clearswift 4.3.12 Symantec AntiVirus Scan Engine for Clearswift 4.3 Symantec AntiVirus Scan Engine for Clearswift 4.0 Symantec AntiVirus Scan Engine for Caching 4.3.12 Symantec AntiVirus Scan Engine for Caching 4.3 Symantec AntiVirus Scan Engine for Bluecoat 4.3.12 Symantec AntiVirus Scan Engine for Bluecoat 4.3 build 4.3.3 Symantec AntiVirus Scan Engine for Bluecoat 4.3 Symantec AntiVirus Scan Engine for Bluecoat 4.0 Symantec AntiVirus Scan Engine 5.0.1 Symantec AntiVirus Scan Engine 4.3.12 Symantec AntiVirus Scan Engine 4.3.3 Symantec AntiVirus Scan Engine 4.3 build 4.3.8.29 Symantec AntiVirus Scan Engine 4.3 build 4.3.7.27 Symantec AntiVirus Scan Engine 4.3 build 4.3.3 Symantec AntiVirus Scan Engine 4.3 Symantec AntiVirus Scan Engine 4.1.8 Symantec AntiVirus Scan Engine 4.1 Symantec AntiVirus Scan Engine 4.0 Symantec AntiVirus for SMTP 4.1.9 Symantec AntiVirus for SMTP 4.0 Symantec AntiVirus for SMTP 3.1.7 Symantec AntiVirus for SMTP 3.1 build 3.1.6 Symantec AntiVirus for SMTP 3.1 build 3.1.5 Symantec AntiVirus for SMTP 3.1 build 3.1.4 Symantec AntiVirus for SMTP 3.1 build 3.1.3 Symantec AntiVirus for SMTP 3.1 build 3.1.2 Symantec AntiVirus for SMTP 3.1 build 3.1.1 Symantec AntiVirus for SMTP 3.1 Symantec Antivirus for MS Office SharePoint Portal Server 2003 Symantec AntiVirus for Handhelds Corporate Edition 3.0 Symantec AntiVirus for Handhelds 3.0 .0.194 Symantec AntiVirus for Handhelds 3.0 Symantec AntiVirus Corporate Edition 10.0 Symantec AntiVirus Corporate Edition 9.0.4 Symantec AntiVirus Corporate Edition 9.0.3 .1000 Symantec AntiVirus Corporate Edition 9.0.2 .1000 Symantec AntiVirus Corporate Edition 9.0.1 .1.1000 Symantec AntiVirus Corporate Edition 9.0 .0.338 Symantec AntiVirus Corporate Edition 9.0 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.329 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.323 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.319 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.314a Symantec AntiVirus Corporate Edition 8.1.1 .377 Symantec AntiVirus Corporate Edition 8.1.1 .366 Symantec AntiVirus Corporate Edition 8.1.1 Symantec AntiVirus Corporate Edition 8.1 build 8.01.471 Symantec AntiVirus Corporate Edition 8.1 build 8.01.464 Symantec AntiVirus Corporate Edition 8.1 build 8.01.460 Symantec AntiVirus Corporate Edition 8.1 build 8.01.457 Symantec AntiVirus Corporate Edition 8.1 build 8.01.446 Symantec AntiVirus Corporate Edition 8.1 build 8.01.437 Symantec AntiVirus Corporate Edition 8.1 build 8.01.434 Symantec AntiVirus Corporate Edition 8.1 .0.825a Symantec AntiVirus Corporate Edition 8.1 Symantec AntiVirus Corporate Edition 8.0 1.9378 Symantec AntiVirus Corporate Edition 8.0 1.9374 Symantec AntiVirus Corporate Edition 8.0 1.501 Symantec AntiVirus Corporate Edition 8.0 1.429c Symantec AntiVirus Corporate Edition 8.0 1.425a/b Symantec AntiVirus Corporate Edition 8.0 1 Symantec AntiVirus Corporate Edition 8.0 Symantec AntiSpam for SMTP 3.1 |
| Not Vulnerable: |
Symantec Client Security 2.0.3 MR3 b9.0.3.1000 Symantec Client Security 2.0.2 MR2 b9.0.2.1000 Symantec Client Security 2.0.1 MR1 b9.0.1.1000 Symantec Client Security 2.0 STM build 9.0.0.338 Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 Symantec Client Security 1.1.1 MR5 build 8.1.1.336 Symantec Client Security 1.1.1 MR4 build 8.1.1.329 Symantec Client Security 1.1.1 MR3 build 8.1.1.323 Symantec Client Security 1.1.1 MR2 build 8.1.1.319 Symantec Client Security 1.1.1 MR1 build 8.1.1.314a Symantec Client Security 1.1.1 MR6 b8.1.1.266 Symantec Client Security 1.1.1 Symantec Client Security 1.1 STM b8.1.0.825a Symantec Client Security 1.1 Symantec Client Security 1.0.1 MR8 build 8.01.471 Symantec Client Security 1.0.1 MR7 build 8.01.464 Symantec Client Security 1.0.1 MR6 build 8.01.460 Symantec Client Security 1.0.1 MR5 build 8.01.457 Symantec Client Security 1.0.1 MR4 build 8.01.446 Symantec Client Security 1.0.1 MR3 build 8.01.434 Symantec Client Security 1.0.1 build 8.01.437 Symantec Client Security 1.0.1 MR9 b8.01.501 Symantec Client Security 1.0.1 MR2 b8.01.429c Symantec Client Security 1.0.1 MR1 b8.01.425a/b Symantec Client Security 1.0.1 Symantec Client Security 1.0 .0 b8.01.9378 Symantec Client Security 1.0 b8.01.9374 Symantec Client Security 1.0 Symantec AntiVirus Corporate Edition 9.0.4 Symantec AntiVirus Corporate Edition 9.0.3 .1000 Symantec AntiVirus Corporate Edition 9.0.2 .1000 Symantec AntiVirus Corporate Edition 9.0.1 .1.1000 Symantec AntiVirus Corporate Edition 9.0 .0.338 Symantec AntiVirus Corporate Edition 9.0 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.329 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.323 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.319 Symantec AntiVirus Corporate Edition 8.1.1 build 8.1.1.314a Symantec AntiVirus Corporate Edition 8.1.1 .377 Symantec AntiVirus Corporate Edition 8.1.1 .366 Symantec AntiVirus Corporate Edition 8.1.1 Symantec AntiVirus Corporate Edition 8.1 build 8.01.471 Symantec AntiVirus Corporate Edition 8.1 build 8.01.464 Symantec AntiVirus Corporate Edition 8.1 build 8.01.460 Symantec AntiVirus Corporate Edition 8.1 build 8.01.457 Symantec AntiVirus Corporate Edition 8.1 build 8.01.446 Symantec AntiVirus Corporate Edition 8.1 build 8.01.437 Symantec AntiVirus Corporate Edition 8.1 build 8.01.434 Symantec AntiVirus Corporate Edition 8.1 .0.825a Symantec AntiVirus Corporate Edition 8.1 Symantec AntiVirus Corporate Edition 8.0 1.9378 Symantec AntiVirus Corporate Edition 8.0 1.9374 Symantec AntiVirus Corporate Edition 8.0 1.501 Symantec AntiVirus Corporate Edition 8.0 1.429c Symantec AntiVirus Corporate Edition 8.0 1.425a/b Symantec AntiVirus Corporate Edition 8.0 1 Symantec AntiVirus Corporate Edition 8.0 |
Discussion
Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
The Symantec antivirus library is prone to multiple heap-based buffer-overflow vulnerabilities.
Attackers could exploit this vulnerability to compromise computers running applications that use the affected library. The issue occurs in the RAR archive decompression routines. The issue may affect all platforms running applications that use the library, including Microsoft Windows and Mac OS X releases of the applications.
Symantec is currently investigating this issue. Note that the issue could affect third-party applications that include the library.
The Symantec antivirus library is prone to multiple heap-based buffer-overflow vulnerabilities.
Attackers could exploit this vulnerability to compromise computers running applications that use the affected library. The issue occurs in the RAR archive decompression routines. The issue may affect all platforms running applications that use the library, including Microsoft Windows and Mac OS X releases of the applications.
Symantec is currently investigating this issue. Note that the issue could affect third-party applications that include the library.
Exploit / POC
Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
A commercial available exploit has been released to the Immunity Partner's Program.
A commercial available exploit has been released to the Immunity Partner's Program.
Solution / Fix
Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
Solution:
Symantec has released advisory SYM05-027 to address this issue.
Symantec is currently working to create and distribute fixes to resolve this issue. Please see the referenced advisory for further information. The referenced advisory will be updated as further affected packages are identified and as fixes become available.
Solution:
Symantec has released advisory SYM05-027 to address this issue.
Symantec is currently working to create and distribute fixes to resolve this issue. Please see the referenced advisory for further information. The referenced advisory will be updated as further affected packages are identified and as fixes become available.
References
Symantec Antivirus Library RAR Decompression Heap Overflow Vulnerabilities
References:
References: