CVE-2007-2955

Published: Aug 9, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.

Affected (4)

Products: Symantec: Norton Antivirus, Norton Internet Security, Norton System Works

3 products

Norton Antivirus

Norton Internet Security

Norton System Works

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Symantec Norton Antivirus	Version 2006
Symantec Norton Internet Security	Version 2005
Symantec Norton Internet Security	Version 2006
Symantec Norton System Works	Version 2006

References (18)

http://secunia.com/advisories/25215

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2007-53/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/bid/24983

Source: PSIRT-CNA@flexerasoftware.com

http://www.securitytracker.com/id?1018545

Source: PSIRT-CNA@flexerasoftware.com

http://www.securitytracker.com/id?1018546

Source: PSIRT-CNA@flexerasoftware.com

http://www.securitytracker.com/id?1018547

Source: PSIRT-CNA@flexerasoftware.com

http://www.symantec.com/avcenter/security/Content/2007.08.09.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/2822

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/35944

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/25215

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/secunia_research/2007-53/advisory/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/24983

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018545

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018546

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1018547

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.symantec.com/avcenter/security/Content/2007.08.09.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/2822

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/35944

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.