Multiple Symantec Products Email Handling Denial Of Service Vulnerability
BID:34670
Info
Multiple Symantec Products Email Handling Denial Of Service Vulnerability
| Bugtraq ID: | 34670 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2009-3104 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 26 2009 12:00AM |
| Updated: | Sep 11 2009 07:11PM |
| Credit: | Mark Litchfield from Next Generation Security Software |
| Vulnerable: |
Symantec Norton Internet Security 2008 0 Symantec Norton Internet Security 2007 0 Symantec Norton Internet Security 2006 Professional Edition Symantec Norton Internet Security 2006 0 Symantec Norton Internet Security 2005 Professional Edition Symantec Norton Internet Security 2005 Anti Spyware Edition 0 Symantec Norton Internet Security 2005 11.5.6 .14 Symantec Norton Internet Security 2005 11.0.9 Symantec Norton Internet Security 2005 11.0 Symantec Norton Internet Security 2005 Symantec Norton Antivirus 2008 0 Symantec Norton Antivirus 2007 0 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Professional Edition Symantec Norton AntiVirus 2005 11.0.9 Symantec Norton AntiVirus 2005 11.0 Symantec Norton AntiVirus 2005 Symantec Client Security 3.1.7 .7000 (MR7) Symantec Client Security 3.1.6 .6010 (MR6-MP1) Symantec Client Security 3.1.5 .5010 (MR5-MP1) Symantec Client Security 3.1.5 .5001 (MR5-PP1) Symantec Client Security 3.1.5 .5000 (MR5) Symantec Client Security 3.1.4 MR4 MP1 - build 4010 Symantec Client Security 3.1.4 .4000 (MR4) Symantec Client Security 3.1 .401 Symantec Client Security 3.1 .400 Symantec Client Security 3.1 .396 Symantec Client Security 3.1 .394 Symantec Client Security 3.0.2 .2021 Symantec Client Security 3.0.2 .2020 Symantec Client Security 3.0.2 .2011 Symantec Client Security 3.0.2 .2010 Symantec Client Security 3.0.2 .2002 Symantec Client Security 3.0.2 .2001 Symantec Client Security 3.0.2 .2000 Symantec Client Security 3.0.1 .1009 (MR1-PP9) Symantec Client Security 3.0.1 .1003 (MR1-PP2) Symantec Client Security 3.0 Symantec Client Security 2.0.6 MR6 MP1 - build 1100 Symantec Client Security 2.0.6 MR6 Symantec Client Security 2.0.6 .1000 (MR6) Symantec Client Security 2.0.5 build 1100 Symantec Client Security 2.0.5 .1001 (MR5-PP1) Symantec Client Security 2.0.5 .1000 (MR5) Symantec Client Security 2.0.4 MR4 build 1000 Symantec Client Security 2.0.4 Symantec Client Security 2.0.3 .1100 (MR3-MP1) Symantec Client Security 2.0.3 .1000 (MR3) Symantec Client Security 2.0.3 MR3 b9.0.3.1000 Symantec Client Security 2.0.2 .1000 (MR2) Symantec Client Security 2.0.2 MR2 b9.0.2.1000 Symantec Client Security 2.0.1 .1100 (MR1-MP1) Symantec Client Security 2.0.1 .1001 (MR1-PP1) Symantec Client Security 2.0.1 .1000 (MR1) Symantec Client Security 2.0.1 MR1 b9.0.1.1000 Symantec Client Security 2.0 .338 (STM) Symantec Client Security 2.0 .1400 (STM-PP2) Symantec Client Security 2.0 .1300 (STM-PP1) Symantec Client Security 2.0 STM build 9.0.0.338 Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 (SCF 7.1) Symantec Client Security 2.0 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1.6.6000 Symantec Client Security 3.1 MR7 Symantec Client Security 3.1 MR6 MP1 Symantec Client Security 3.1 MR6 Symantec Client Security 3.1 Symantec Client Security 3.0.1.1008 Symantec Client Security 3.0.1.1007 Symantec Client Security 3.0.1.1001 Symantec Client Security 3.0.1.1000 Symantec Client Security 3.0.0.359 Symantec Client Security 2.0 MR6 MP1 Symantec AntiVirus Corporate Edition 10.2.1 .1000 (MR1) Symantec AntiVirus Corporate Edition 10.2 .313 (STM-PP1) Symantec AntiVirus Corporate Edition 10.2 .298 (STM 64-bit) Symantec AntiVirus Corporate Edition 10.2 .276 (STM 32-bit) Symantec AntiVirus Corporate Edition 10.1.7 .7000 (MR7) Symantec AntiVirus Corporate Edition 10.1.6 .6010 (MR6-MP1) Symantec AntiVirus Corporate Edition 10.1.5 .5010 (MR5-MP1) Symantec AntiVirus Corporate Edition 10.1.5 .5001 (MR5-PP1) Symantec AntiVirus Corporate Edition 10.1.5 .5000 (MR5) Symantec AntiVirus Corporate Edition 10.1.4 MR4 MP1 - build 4010 Symantec AntiVirus Corporate Edition 10.1.4 .4000 (MR4) Symantec AntiVirus Corporate Edition 10.1.4 Symantec AntiVirus Corporate Edition 10.1 .401 Symantec AntiVirus Corporate Edition 10.1 .400 Symantec AntiVirus Corporate Edition 10.1 .396 Symantec AntiVirus Corporate Edition 10.1 .394 Symantec AntiVirus Corporate Edition 10.0.2 .2021 Symantec AntiVirus Corporate Edition 10.0.2 .2020 Symantec AntiVirus Corporate Edition 10.0.2 .2011 Symantec AntiVirus Corporate Edition 10.0.2 .2010 Symantec AntiVirus Corporate Edition 10.0.2 .2010 Symantec AntiVirus Corporate Edition 10.0.2 .2002 Symantec AntiVirus Corporate Edition 10.0.2 .2001 Symantec AntiVirus Corporate Edition 10.0.2 .2000 Symantec AntiVirus Corporate Edition 10.0.1 .1009 (MR1-PP9) Symantec AntiVirus Corporate Edition 10.0.1 .1003 (MR1-PP2) Symantec AntiVirus Corporate Edition 10.0.1 .1001 (MR1-PP1) Symantec AntiVirus Corporate Edition 10.0 Symantec AntiVirus Corporate Edition 9.0.6 MR6 MP1 - build 1100 Symantec AntiVirus Corporate Edition 9.0.6 .1000 (MR6) Symantec AntiVirus Corporate Edition 9.0.5 .1100 Symantec AntiVirus Corporate Edition 9.0.5 .1001 (MR5-PP1) Symantec AntiVirus Corporate Edition 9.0.5 .1000 (MR5) Symantec AntiVirus Corporate Edition 9.0.5 Symantec AntiVirus Corporate Edition 9.0.4 MR4 build 1000 Symantec AntiVirus Corporate Edition 9.0.4 Symantec AntiVirus Corporate Edition 9.0.3 .1100 (MR3-MP1) Symantec AntiVirus Corporate Edition 9.0.3 .1000 Symantec AntiVirus Corporate Edition 9.0.2 .1000 Symantec AntiVirus Corporate Edition 9.0.1 .1100 (MR1-MP1) Symantec AntiVirus Corporate Edition 9.0.1 .1001 (MR1-PP1) Symantec AntiVirus Corporate Edition 9.0.1 .1000 (MR1) Symantec AntiVirus Corporate Edition 9.0.1 .1.1000 Symantec AntiVirus Corporate Edition 9.0 .1400 (STM-PP2) Symantec AntiVirus Corporate Edition 9.0 .1300 (STM-PP1) Symantec AntiVirus Corporate Edition 9.0 .0.338 Symantec AntiVirus Corporate Edition 9.0 Symantec AntiVirus Corporate Edition 9.0.6.1000 Symantec AntiVirus Corporate Edition 9 MR6 MP1 Symantec AntiVirus Corporate Edition 10.2 MR2 Symantec AntiVirus Corporate Edition 10.2 MR1 Symantec AntiVirus Corporate Edition 10.2 Symantec AntiVirus Corporate Edition 10.1.6.6000 Symantec AntiVirus Corporate Edition 10.1.6.600 Symantec AntiVirus Corporate Edition 10.1.4.4010 Symantec AntiVirus Corporate Edition 10.1 MR7 Symantec AntiVirus Corporate Edition 10.1 MR6 MP1 Symantec AntiVirus Corporate Edition 10.1 MR6 Symantec AntiVirus Corporate Edition 10.0.2.2000 Symantec AntiVirus Corporate Edition 10.0.1.1008 Symantec AntiVirus Corporate Edition 10.0.1.1007 Symantec AntiVirus Corporate Edition 10.0.1.1000 Symantec AntiVirus Corporate Edition 10.0.0.359 |
| Not Vulnerable: |
Symantec Norton Internet Security 2009 0 Symantec Norton Antivirus 2009 0 Symantec Client Security 3.1 MR8 Symantec Client Security 2.0 MR7 Symantec AntiVirus Corporate Edition 9.0 MR7 Symantec AntiVirus Corporate Edition 10.2 MR3 Symantec AntiVirus Corporate Edition 10.1 MR8 |
Discussion
Multiple Symantec Products Email Handling Denial Of Service Vulnerability
Multiple Symantec products are prone to a remote denial-of-service vulnerability when processing specially crafted email messages.
An attacker can exploit this issue to cause denial-of-service conditions and launch further attacks.
The following products are affected:
Norton AntiVirus
Norton Internet Security
Symantec AntiVirus Corporate Edition
Symantec Client Security
Multiple Symantec products are prone to a remote denial-of-service vulnerability when processing specially crafted email messages.
An attacker can exploit this issue to cause denial-of-service conditions and launch further attacks.
The following products are affected:
Norton AntiVirus
Norton Internet Security
Symantec AntiVirus Corporate Edition
Symantec Client Security
Exploit / POC
Multiple Symantec Products Email Handling Denial Of Service Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
Multiple Symantec Products Email Handling Denial Of Service Vulnerability
Solution:
Vendor updates are available. Please see the referenced advisories for details.
Solution:
Vendor updates are available. Please see the referenced advisories for details.
References
Multiple Symantec Products Email Handling Denial Of Service Vulnerability
References:
References: