CVE-2010-0107

Published: Feb 23, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."

Affected (31)

Products: Symantec: Client Security, Norton 360, Norton Antivirus, Norton Internet Security

4 products

Norton Internet Security

Configuration A

31 vulnerable

Vulnerable Software	Affected Versions
Symantec Client Security	Version 3.0.1.1000
Symantec Client Security	Version 3.0.1.1001
Symantec Client Security	Version 3.0.1.1007
Symantec Client Security	Version 3.0.1.1008
Symantec Client Security	Version 3.0.1.1009
Symantec Client Security	Version 3.0.2.2000
Symantec Client Security	Version 3.0.2.2001
Symantec Client Security	Version 3.0.2.2002
Symantec Client Security	Version 3.0.2.2010
Symantec Client Security	Version 3.0.2.2011
Symantec Client Security	Version 3.0.2.2020
Symantec Client Security	Version 3.0.2.2021
Symantec Client Security	Version 3.0.2
Symantec Client Security	Version 3.0
Symantec Client Security	Version 3.1.0.396
Symantec Client Security	Version 3.1.0.401
Symantec Client Security	Version 3.1.396
Symantec Client Security	Version 3.1.400
Symantec Client Security	Version 3.1.401
Symantec Client Security	Version 3.1
Symantec Client Security	Version 3.1 mr4
Symantec Client Security	Version 3.1 mr5
Symantec Client Security	Version 3.1 mr6
Symantec Norton 360	Version 1.0
Symantec Norton 360	Version 2.0
Symantec Norton Antivirus	Version 2006
Symantec Norton Antivirus	Version 2007
Symantec Norton Antivirus	Version 2008
Symantec Norton Internet Security	Version 2006
Symantec Norton Internet Security	Version 2007
Symantec Norton Internet Security	Version 2008