Norton Antivirus 2002 Email Scanner Buffer Overflow Vulnerability

Bugtraq ID:	6886
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 19 2003 12:00AM
Updated:	Feb 19 2003 12:00AM
Credit:	Discovery is credited to ARAI Yuu [email protected].
Vulnerable:	Symantec Norton AntiVirus 2002 0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home - Microsoft Windows XP Professional
Not Vulnerable:	Symantec Norton Antivirus 2003 0 - Microsoft Windows 2000 Professional SP3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows XP Home SP1 - Microsoft Windows XP Home - Microsoft Windows XP Professional

Norton Antivirus 2002 Email Scanner Buffer Overflow Vulnerability

The Norton Antivirus 2002 email scanner is vulnerable to a buffer overflow. The overflow occurs during the scanning of a compressed message attachment containing a file with an excessively long file name. This could potentially result in code execution in the security context of the antivirus scanner.

Norton Antivirus 2002 Email Scanner Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Norton Antivirus 2002 Email Scanner Buffer Overflow Vulnerability

Solution:
Product updates containing the fix have been distributed via LiveUpdate.

Norton Antivirus 2002 Email Scanner Buffer Overflow Vulnerability

References:

• Symantec Homepage (Symantec)
  
• Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerability (Symantec)
  
• [SNS Advisory No.61] Symantec Norton AntiVirus 2002 Buffer Overflow Vulnerabilit ("[email protected]" )