Vulnerability Intelligence Report
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:3.91%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| symantec | antivirus_scan_engine | 4.0, 4.1, 4.1.8, 4.3, 4.3.3, 4.3.7.27, 4.3.8.29, 4.3.12, 5.0, 5.0.1 |
| symantec | brightmail_antispam | 4.0, 5.5, 6.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4 |
| symantec | client_security | 2.0, 2.0.1_build_9.0.1.1000, 2.0.2_build_9.0.2.1000, 2.0.3_build_9.0.3.1000, 2.0.4, 2.0.5_build_1100_mp1, 2.0.6, 3.0, 3.0.0.359, 3.0.1.1000, 3.0.1.1001, 3.0.1.1007, 3.0.1.1008, 3.0.2.2000, 3.0.2.2001, 3.0.2.2002, 3.0.2.2010, 3.0.2.2011, 3.0.2.2020, 3.0.2.2021, 3.1, 3.1.394, 3.1.396, 3.1.400, 3.1.401 |
| symantec | mail_security | 4.0, 4.0.1, 4.1, 4.5, 4.5.4.743, 4.5_build_719, 4.5_build_736, 4.5_build_741, 4.6.1.107, 4.6.3, 4.6_build_97, 5.0, 5.0.0.204, 5.0.1, 5.1.0, 6.0.0 |
| symantec | norton_antivirus | 9.0, 9.0.0, 9.0.0.338, 9.0.1, 9.0.1.1.1000, 9.0.2, 9.0.2.1000, 9.0.3, 9.0.3.1000, 9.0.4, 9.0.5, 9.0.5.1100, 9.0.6.1000, 10.0, 10.0.0, 10.0.0.359, 10.0.1, 10.0.1.1000, 10.0.1.1007, 10.0.1.1008, 10.0.2.2000, 10.0.2.2001, 10.0.2.2002, 10.0.2.2010, 10.0.2.2011, 10.0.2.2020, 10.0.2.2021, 10.1, 10.1.4, 10.1.4.4010, 10.1.394, 10.1.396, 10.1.400, 10.1.401, 10.9.1, 2004, 2005, 2006 |
| symantec | norton_internet_security | 3.0, 2004, 2005, 2006 |
| symantec | norton_personal_firewall | 2006, 2006_9.1.0.33, 2006_9.1.1.7 |
| symantec | norton_system_works | 3.0, 2004, 2005, 2006 |
| symantec | symantec_antivirus_filtering_\+for_domino | 3.0.12 |
| symantec | web_security | 2.5, 3.0, 3.0.1, 3.0.1.70, 3.0.1.76, 3.0.1_build_3.01.70, 3.0.1_build_3.01.72, 3.0.1_build_3.01.74, 3.01.59, 3.01.60, 3.01.61, 3.01.62, 3.01.63, 3.01.67, 3.01.68, 5.0 |
| symantec | gateway_security_5000_series | 3.0.1 |
| symantec | gateway_security_5400 | 2.0.1 |
| symantec | mail_security_8820_appliance | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
3.914%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2007-07-11T00:00:00 |
| Published | 2007-10-05T21:00:00 |
| Patch Date | 2007-07-11 |
| Last Updated | 2024-08-07T14:28:52 |
Community Chatter & Buzz