Vulnerability Intelligence Report
CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
No Active Exploit Signals
CVSS Base Score
7.5
HIGH
EPSS Probability:18.83%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| symantec | antivirus_scan_engine | all |
| symantec | brightmail_antispam | 4.0, 5.5 |
| symantec | client_security | 1.0.1_build_8.01.434, 1.0.1_build_8.01.437, 1.0.1_build_8.01.446, 1.0.1_build_8.01.457, 1.0.1_build_8.01.460, 1.0.1_build_8.01.464, 1.0.1_build_8.01.471, 1.1.1_mr1_build_8.1.1.314a, 1.1.1_mr2_build_8.1.1.319, 1.1.1_mr3_build_8.1.1.323, 1.1.1_mr4_build_8.1.1.329, 1.1.1_mr5_build_8.1.1.336 |
| symantec | gateway_security | 1.0, 2.0, 2.0.1 |
| symantec | mail_security | 4.0, 4.1, 4.5_build_719 |
| symantec | norton_antivirus | 2.18_build_83, 8.1.1.319, 8.1.1.323, 8.1.1.329, 8.1.1_build8.1.1.314a, 8.01.434, 8.01.437, 8.01.446, 8.01.457, 8.01.460, 8.01.464, 8.01.471, 9.0, 2004 |
| symantec | norton_internet_security | 2004 |
| symantec | norton_system_works | 2004 |
| symantec | sav_filter_domino_nt_ports | build3.0.5 |
| symantec | sav_filter_for_domino_nt | 3.1.1 |
| symantec | web_security | 3.01.59, 3.01.60, 3.01.61, 3.01.62, 3.01.63, 3.01.67, 3.01.68 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
18.832%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2005-02-08T00:00:00 |
| Published | 2005-02-08T05:00:00 |
| Patch Date | 2005-02-08 |
| Last Updated | 2024-08-07T21:05:25 |
Community Chatter & Buzz