| Vulnerability Name: | CVE-2007-3951 (CCN-35559) | ||||||||
| Assigned: | 2007-07-23 | ||||||||
| Published: | 2007-07-23 | ||||||||
| Updated: | 2018-10-15 | ||||||||
| Summary: | Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) ACE or (2) LZH file, resulting from an "integer cast around." | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.8 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-3951 Source: OSVDB Type: UNKNOWN 37982 Source: OSVDB Type: UNKNOWN 37983 Source: CCN Type: SA26178 Norman Antivirus Products Multiple File Parsing Vulnerabilities Source: SECUNIA Type: UNKNOWN 26178 Source: SREASON Type: UNKNOWN 2912 Source: CCN Type: SECTRACK ID: 1018438 Norman Virus Control ACE and LZH Buffer Overflows Let Remote Users Execute Arbitrary Code Source: CCN Type: Norman Web site :: NORMAN :: Antivirus | Firewall | Network security Source: CCN Type: Norman Security Bulletin, 27 July 2007 Vulnerabilities in Norman's antivirus scanner engine Source: MISC Type: UNKNOWN http://www.nruns.com/security_advisory_Norman_all_ace_buffer_overflow.php Source: CCN Type: n.runs-SA-2007.021 Norman Antivirus LZH parsing Arbitrary Code Execution Advisory Source: MISC Type: UNKNOWN http://www.nruns.com/security_advisory_norman_antivirus_lzh_buffer_overflow.php Source: CCN Type: OSVDB ID: 37982 Norman Antivirus ACE Archive Handling Multiple Overflows Source: CCN Type: OSVDB ID: 37983 Norman Antivirus LZH Archive Handling Source: BUGTRAQ Type: UNKNOWN 20070723 n.runs-SA-2007.020 - Norman Antivirus ACE parsing Arbitrary Code Execution Advisory Source: BUGTRAQ Type: UNKNOWN 20070723 n.runs-SA-2007.021 - Norman Antivirus LZH parsing Arbitrary Code Execution Advisory Source: BID Type: UNKNOWN 25003 Source: CCN Type: BID-25003 Multiple Norman Virus Control Products LZH Multiple Buffer-Overflow Vulnerabilities Source: BID Type: UNKNOWN 25015 Source: CCN Type: BID-25015 Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability Source: SECTRACK Type: UNKNOWN 1018438 Source: VUPEN Type: UNKNOWN ADV-2007-2619 Source: XF Type: UNKNOWN norman-lzh-bo(35559) Source: XF Type: UNKNOWN norman-lzh-bo(35559) Source: XF Type: UNKNOWN norman-ace-bo(35561) | ||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||
| Vulnerability Name: | CVE-2007-3951 (CCN-35561) | ||||||||
| Assigned: | 2007-07-23 | ||||||||
| Published: | 2007-07-23 | ||||||||
| Updated: | 2007-07-23 | ||||||||
| Summary: | Norman Virus Control is vulnerable to multiple buffer overflows, caused by improper bounds checking by the file parsing engine. By persuading a victim to scan a specially-crafted ACE file, a remote attacker could overflow a buffer and execute arbitrary code on the system. | ||||||||
| CVSS v3 Severity: | 5.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P) 5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
3.8 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Consequences: | Gain Access | ||||||||
| References: | Source: MITRE Type: CNA CVE-2007-3951 Source: CCN Type: SA26178 Norman Antivirus Products Multiple File Parsing Vulnerabilities Source: CCN Type: SECTRACK ID: 1018438 Norman Virus Control ACE and LZH Buffer Overflows Let Remote Users Execute Arbitrary Code Source: CCN Type: Norman Web site :: NORMAN :: Antivirus | Firewall | Network security Source: CCN Type: Norman Security Bulletin, 27 July 2007 Vulnerabilities in Norman's antivirus scanner engine Source: CCN Type: n.runs-SA-2007.020 Norman Antivirus ACE parsing Arbitrary Code Execution Advisory Source: CCN Type: OSVDB ID: 37982 Norman Antivirus ACE Archive Handling Multiple Overflows Source: CCN Type: OSVDB ID: 37983 Norman Antivirus LZH Archive Handling Source: CCN Type: BID-25003 Multiple Norman Virus Control Products LZH Multiple Buffer-Overflow Vulnerabilities Source: CCN Type: BID-25015 Norman Virus Control ACE Parsing Buffer-Overflow Vulnerability Source: XF Type: UNKNOWN norman-ace-bo(35561) | ||||||||
| Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||||
| BACK | |||||||||