CVE-2005-2758

Published: Oct 5, 2005Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.

Affected (10)

Products: Symantec: Antivirus Scan Engine, Antivirus Scan Engine For Network Attached Storage

2 products

Antivirus Scan Engine

Antivirus Scan Engine For Network Attached Storage

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Symantec Antivirus Scan Engine	Version 4.0
Symantec Antivirus Scan Engine	Version 4.0
Symantec Antivirus Scan Engine	Version 4.0
Symantec Antivirus Scan Engine	Version 4.0
Symantec Antivirus Scan Engine	Version 4.0
Symantec Antivirus Scan Engine	Version 4.3
Symantec Antivirus Scan Engine	Version 4.3
Symantec Antivirus Scan Engine	Version 4.3
Symantec Antivirus Scan Engine	Version 4.3
Symantec Antivirus Scan Engine For Network Attached Storage	Version 4.3

References (20)

http://secunia.com/advisories/17049

Source: cve@mitre.org

http://securityreason.com/securityalert/48

Source: cve@mitre.org

http://securitytracker.com/id?1015001

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/849209

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/19854

Source: cve@mitre.org

http://www.securityfocus.com/bid/15001

Source: cve@mitre.org

http://www.symantec.com/avcenter/security/Content/2005.10.04.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2005/1954

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/22519

Source: cve@mitre.org

http://secunia.com/advisories/17049

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/48

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.idefense.com/application/poi/display?id=314&type=vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/849209

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/19854

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/15001

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.symantec.com/avcenter/security/Content/2005.10.04.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2005/1954

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/22519

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.