Vulnerability Intelligence Report
CVE-2010-0107
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."
No Active Exploit Signals
CVSS Base Score
9.3
HIGH
EPSS Probability:6.53%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| symantec | client_security | 3.0, 3.0.1.1000, 3.0.1.1001, 3.0.1.1007, 3.0.1.1008, 3.0.1.1009, 3.0.2, 3.0.2.2000, 3.0.2.2001, 3.0.2.2002, 3.0.2.2010, 3.0.2.2011, 3.0.2.2020, 3.0.2.2021, 3.1, 3.1.0.396, 3.1.0.401, 3.1.396, 3.1.400, 3.1.401 |
| symantec | norton_360 | 1.0, 2.0 |
| symantec | norton_antivirus | 2006, 2007, 2008 |
| symantec | norton_internet_security | 2006, 2007, 2008 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
6.525%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2009-12-31T00:00:00 |
| Published | 2010-02-23T20:00:00 |
| Patch Date | 2010-02-17 |
| Last Updated | 2024-08-07T00:37:53 |
Community Chatter & Buzz