Norman Virus Control DOC OLE File Parsing Denial Of Service Vulnerability

Bugtraq ID:	25014
Class:	Design Error
CVE:	CVE-2007-3953
Remote:	Yes
Local:	No
Published:	Jul 23 2007 12:00AM
Updated:	May 07 2015 05:36PM
Credit:	Sergio Alvarez of n.runs AG is credited with the discovery of these vulnerabilities.
Vulnerable:	Norman Virus Control Plus 0 Norman Virus Control for OS/2 5.5 Norman Virus Control for OS/2 5.4 Norman Virus Control for OS/2 5.3 Norman Virus Control for OS/2 5.2 Norman Virus Control for OS/2 5.1 Norman Virus Control for OS/2 5.0 Norman Virus Control for MIMESweeper 5.5 Norman Virus Control for MIMESweeper 5.4 Norman Virus Control for MIMESweeper 5.3 Norman Virus Control for MIMESweeper 5.2 Norman Virus Control for MIMESweeper 5.1 Norman Virus Control for MIMESweeper 5.0 Norman Virus Control for Lotus Domino 5.5 Norman Virus Control for Lotus Domino 5.4 Norman Virus Control for Lotus Domino 5.3 Norman Virus Control for Lotus Domino 5.2 Norman Virus Control for Lotus Domino 5.1 Norman Virus Control for Lotus Domino 5.0 Norman Virus Control for Linux 5.5 Norman Virus Control for Linux 5.4 Norman Virus Control for Linux 5.3 Norman Virus Control for Linux 5.2 Norman Virus Control for Linux 5.1 Norman Virus Control for Linux 5.0 Norman Virus Control for IIS 5.5 Norman Virus Control for IIS 5.4 Norman Virus Control for IIS 5.3 Norman Virus Control for IIS 5.2 Norman Virus Control for IIS 5.1 Norman Virus Control for IIS 5.0 Norman Virus Control for Firewall-1 5.5 Norman Virus Control for Firewall-1 5.4 Norman Virus Control for Firewall-1 5.3 Norman Virus Control for Firewall-1 5.2 Norman Virus Control for Firewall-1 5.1 Norman Virus Control for Firewall-1 5.0 Norman Virus Control for Exchange 5.5 5.5 Norman Virus Control for Exchange 5.5 5.4 Norman Virus Control for Exchange 5.5 5.3 Norman Virus Control for Exchange 5.5 5.2 Norman Virus Control for Exchange 5.5 5.1 Norman Virus Control for Exchange 5.5 5.0 Norman Virus Control for Exchange 2000 5.5 Norman Virus Control for Exchange 2000 5.4 Norman Virus Control for Exchange 2000 5.3 Norman Virus Control for Exchange 2000 5.2 Norman Virus Control for Exchange 2000 5.1 Norman Virus Control for Exchange 2000 5.0 Norman Virus Control 5.81 Norman Virus Control 5.7 Norman Virus Control 5.5 Norman Virus Control 5.4 Norman Virus Control 5.3 Norman Virus Control 5.2 Norman Virus Control 5.1 Norman Virus Control 5.0 Norman Virus Control 5.90
Not Vulnerable:

Norman Virus Control DOC OLE File Parsing Denial Of Service Vulnerability

Norman Virus Control is prone to a denial-of-service vulnerability because the application fails to handle specially crafted files.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

Norman Virus Control DOC OLE File Parsing Denial Of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Norman Virus Control DOC OLE File Parsing Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Norman Virus Control DOC OLE File Parsing Denial Of Service Vulnerability

References:

• Vendor Homepage (Norman )
  
• n.run Parsing Engine Advisories (n.run )