CVE-2007-3021

Published: Jun 5, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.

Affected (11)

Products: Symantec: Client Security, Norton Antivirus, Reporting Server

3 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Symantec Client Security	Version 3.1.394
Symantec Client Security	Version 3.1.396
Symantec Client Security	Version 3.1.400
Symantec Client Security	Version 3.1.401
Symantec Client Security	Version 3.1
Symantec Norton Antivirus	Version 10.0.2.2021
Symantec Norton Antivirus	Version 10.1.396
Symantec Norton Antivirus	Version 10.1.400
Symantec Norton Antivirus	Version 10.1.401
Symantec Norton Antivirus	Version 10.1
Symantec Reporting Server	Up to 1.0.197.0