var-200710-0500
Vulnerability from variot

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header. This vulnerability allows attackers to create a denial of service condition on software with vulnerable installations of the Symantec's AntiVirus engine. Authentication is not required to exploit this vulnerability.The specific flaw resides in a forged PACK_SIZE field of a RAR file header. These issues include a denial-of-service vulnerability and a buffer-overflow vulnerability. Symantec AntiVirus is a very popular antivirus solution.

Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure.

The Full Featured Secunia Network Software Inspector (NSI) is now available: http://secunia.com/network_software_inspector/

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,000 different Windows applications.

TITLE: Symantec Products CAB and RAR Archive Handling Vulnerabilities

SECUNIA ADVISORY ID: SA26053

VERIFY ADVISORY: http://secunia.com/advisories/26053/

CRITICAL: Highly critical

IMPACT: DoS, System access

WHERE:

From remote

OPERATING SYSTEM: Symantec Gateway Security 5400 Series 2.x http://secunia.com/product/6633/ Symantec Gateway Security 5000 Series 3.x http://secunia.com/product/6648/

SOFTWARE: Symantec Web Security 3.x http://secunia.com/product/2813/ Symantec Scan Engine 5.x http://secunia.com/product/6651/ Symantec Mail Security for SMTP 5.x http://secunia.com/product/13591/ Symantec Mail Security for Microsoft Exchange 6.x http://secunia.com/product/14765/ Symantec Mail Security for Microsoft Exchange 5.x http://secunia.com/product/6650/ Symantec Mail Security for Exchange 4.x http://secunia.com/product/2820/ Symantec Mail Security for Domino 5.x http://secunia.com/product/11179/ Symantec Mail Security for Domino 4.x http://secunia.com/product/4624/ Symantec Client Security 3.x http://secunia.com/product/6649/ Symantec Client Security 2.x http://secunia.com/product/3478/ Symantec Brightmail AntiSpam 6.x http://secunia.com/product/3656/ Symantec Brightmail AntiSpam 5.x http://secunia.com/product/4628/ Symantec Brightmail AntiSpam 4.x http://secunia.com/product/4627/ Symantec AntiVirus/Filtering for Domino 3.x http://secunia.com/product/2029/ Symantec AntiVirus Scan Engine 4.x http://secunia.com/product/3040/ Symantec AntiVirus for Network Attached Storage 4.x http://secunia.com/product/4625/ Symantec AntiVirus for Macintosh 10.x http://secunia.com/product/14768/ Symantec AntiVirus Corporate Edition for Linux http://secunia.com/product/14767/ Symantec AntiVirus Corporate Edition 9.x http://secunia.com/product/3549/ Symantec AntiVirus Corporate Edition 10.x http://secunia.com/product/5555/ Symantec Norton AntiVirus 2004 http://secunia.com/product/2800/ Symantec Norton AntiVirus 2005 http://secunia.com/product/4009/ Symantec Norton AntiVirus 2006 http://secunia.com/product/6634/ Symantec Norton Internet Security 2004 http://secunia.com/product/2441/ Symantec Norton Internet Security 2004 Professional http://secunia.com/product/2442/ Symantec Norton Internet Security 2005 http://secunia.com/product/4848/ Symantec Norton Internet Security 2006 http://secunia.com/product/6635/ Symantec Norton SystemWorks 2004 http://secunia.com/product/2796/ Symantec Norton SystemWorks 2005 http://secunia.com/product/4847/ Symantec Norton SystemWorks 2006 http://secunia.com/product/6636/ Symantec Norton Personal Firewall 2006 http://secunia.com/product/6638/ Symantec Norton AntiVirus for Macintosh 9.x http://secunia.com/product/5948/ Symantec Norton AntiVirus for Macintosh 10.x http://secunia.com/product/5949/ Symantec Norton Internet Security for Macintosh 3.x http://secunia.com/product/5951/ Symantec Norton SystemWorks for Macintosh 3.x http://secunia.com/product/5952/

DESCRIPTION: Two vulnerabilities have been reported in various Symantec products, which can be exploited by malicious people to cause a DoS (Denial of Service) or potentially compromise a vulnerable system.

The vulnerabilities are reported in the following products and versions: * Symantec Mail Security 8200 (all builds) * Symantec Mail Security for Microsoft Exchange versions 4.6.3 and prior, 5.0.0.204, and 6.0.0 (all builds) * Symantec Mail Security for Domino NT versions 4.1.4 and prior and 5.0.0.47 (all builds) * Symantec AntiVirus/Filtering for Domino MPE(AIX, Linux, Solaris) versions 3.0.12 and prior (all builds) * Symantec Scan Engine version 5.0.1 and prior (all builds) * Symantec AntiVirus Scan Engine versions 4.1.8 and prior and 4.3.12 and prior (all builds) * Symantec AntiVirus Scan Engine for MS ISA versions 4.3.12 and prior (all builds) * Symantec AntiVirus Scan Engine for MS Sharepoint versions 4.3.12 and prior (all builds) * Symantec AntiVirus Scan Engine for Messaging versions 4.3.12 and prior (all builds) * Symantec AntiVirus for Network Attached Storage versions 4.3.12 and prior (all builds) * Symantec AntiVirus Scan Engine for Clearswift versions 4.3.12 and prior (all builds) * Symantec AntiVirus Scan Engine for Caching versions 4.3.12 and prior (all builds) * Symantec Client Security versions 3.0, 3.x, and 2.x (all builds) * Symantec Web Security versions 3.0.1.76 and prior (all builds) * Symantec Gateway Security 5000 Series version 3.01 (all builds) * Symantec Gateway Security 5400 Series version 2.0.1 (all builds) * Symantec Brightmail AntiSpam versions 6.0.x, 5.5, and 4.x (all builds) * Symantec AntiVirus Corporate Edition versions 10.1, 10.0, and 9.0 (10.1.5.5000 and prior and 9.0.6.1000 and prior) * Symantec AntiVirus Corperate Edition for Linux * Symantec AntiVirus for Macintosh version 10.x (all builds) * Symantec Web Security for Microsoft ISA 2004 version 5.0 (all builds) * Symantec Mail Security for SMTP version 5.0.0 (Windows/Linux/Solaris) and 5.0.1 (all builds) * Norton AntiVirus 2004/2005/2006 * Norton Internet Security 2004/2005/2005.5 AntiSpyware Edition/2006 * Norton SystemWorks 2004/2005/2006 * Norton Personal Firewall 2006 * Norton AntiVirus for Macintosh versions 9.x and 10.x * Norton Internet Security for Macintosh version 3.x * Norton SystemWorks for Macintosh version 3.x

SOLUTION: Apply updates or run LiveUpdate. Please see the vendor's advisory for details.

ORIGINAL ADVISORY: Symantec: http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html

About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

. ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-039.html July 12, 2007

-- CVE ID: CVE-2007-3699

-- Affected Vendor: Symantec

-- Affected Products: Symantec AntiVirus Engine

-- TippingPoint(TM) IPS Customer Protection: TippingPoint IPS customers have been protected against this vulnerability since November 20, 2006 by Digital Vaccine protection filter ID 4695,4824. Authentication is not required to exploit this vulnerability.

-- Vendor Response: Symantec has issued an update to correct this vulnerability. More details can be found at:

http://www.symantec.com/avcenter/security/Content/2007.07.11f.html

-- Disclosure Timeline: 2006.11.01 - Vulnerability reported to vendor 2006.11.20 - Digital Vaccine released to TippingPoint customers 2007.07.12 - Coordinated public release of advisory

-- Credit: This vulnerability was discovered by an anonymous researcher.

-- About the Zero Day Initiative (ZDI): Established by TippingPoint, a division of 3Com, The Zero Day Initiative (ZDI) represents a best-of-breed model for rewarding security researchers for responsibly disclosing discovered vulnerabilities.

Researchers interested in getting paid for their security research through the ZDI can find more information and sign-up at:

http://www.zerodayinitiative.com

The ZDI is unique in how the acquired vulnerability information is used. 3Com does not re-sell the vulnerability details or any exploit code. Instead, upon notifying the affected product vendor, 3Com provides its customers with zero day protection through its intrusion prevention technology. Explicit details regarding the specifics of the vulnerability are not exposed to any parties until an official vendor patch is publicly available. Furthermore, with the altruistic aim of helping to secure a broader user base, 3Com provides this vulnerability information confidentially to security vendors (including competitors) who have a vulnerability protection or mitigation product.

CONFIDENTIALITY NOTICE: This e-mail message, including any attachments, is being sent by 3Com for the sole use of the intended recipient(s) and may contain confidential, proprietary and/or privileged information. Any unauthorized review, use, disclosure and/or distribution by any recipient is prohibited. If you are not the intended recipient, please delete and/or destroy all copies of this message regardless of form and any included attachments and notify 3Com immediately by contacting the sender via reply e-mail or forwarding to 3Com at postmaster@3com.com

Show details on source website


{
  "affected_products": {
    "_id": null,
    "data": [
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "symantec",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "symantec",
        "version": "4.3"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.9,
        "vendor": "symantec",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "symantec",
        "version": "4.3.7.27"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "symantec",
        "version": "4.3.8.29"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.1008"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.1.394"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "4.1.8"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.0.359"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.1001"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.1.400"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2.0"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "5.0.1"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2.0.4"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2006"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.70"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2.5"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2000"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.76"
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2006"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.1.396"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "4.3.3"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.1000"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2020"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2010"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "2006"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2001"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1.1007"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2011"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2021"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.1"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.1.401"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.3,
        "vendor": "symantec",
        "version": "3.0.2.2002"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.401"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.68"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.59"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.5.4.743"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0.2"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.6.1.107"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.3_build_9.0.3.1000"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.5_build_719"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.3"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0.0"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.2"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0.1_build_3.01.72"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2002"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2000"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.1.1.1000"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.5"
      },
      {
        "_id": null,
        "model": "antivirus filtering \\+for domino",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0.12"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.0"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.1.1000"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.9.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.5.1100"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2006_9.1.0.33"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.3.1000"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.5_build_741"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "*"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.396"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0.4"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.60"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.4"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.62"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.6.1000"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.6.3"
      },
      {
        "_id": null,
        "model": "gateway security 5400",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.4"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0.1"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0.3"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.4.4010"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.67"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.0.0.204"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2010"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2011"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2006"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0.1_build_3.01.70"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "6.0"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.1.0"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.2.1000"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.5_build_736"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.5"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.0.338"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.61"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.01.63"
      },
      {
        "_id": null,
        "model": "mail security 8820 appliance",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "*"
      },
      {
        "_id": null,
        "model": "gateway security 5000 series",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0.1"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.1_build_9.0.1.1000"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.2_build_9.0.2.1000"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "3.0.1_build_3.01.74"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.6"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.1.1008"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "5.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.394"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.1"
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2006_9.1.1.7"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2020"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.6_build_97"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2001"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.0.359"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1.400"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.1.1007"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.5"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.0"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "2.0.5_build_1100_mp1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.1"
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "4.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "9.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "symantec",
        "version": "10.0.2.2021"
      },
      {
        "_id": null,
        "model": "brightmail antispam",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "client security",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "gateway security 5000 series",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "norton systemworks",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "antivirus filtering +for domino",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "gateway security 5400 series",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "mail security",
        "scope": "eq",
        "trust": 0.8,
        "vendor": "symantec",
        "version": "(domino)"
      },
      {
        "_id": null,
        "model": "scan engine",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "web security",
        "scope": null,
        "trust": 0.8,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "antivirus engine",
        "scope": null,
        "trust": 0.7,
        "vendor": "symantec",
        "version": null
      },
      {
        "_id": null,
        "model": "norton systemworks",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20060"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2010"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.0.338"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for caching",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for clearswift",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition mr4 build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.41000"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.4"
      },
      {
        "_id": null,
        "model": "client security",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.1.6.6000"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.6.1000"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.1"
      },
      {
        "_id": null,
        "model": "client security mr6",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.6"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20060"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.1.1007"
      },
      {
        "_id": null,
        "model": "gateway security",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "54003.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.9.1"
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20069.1.1.7"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.5736"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.0.1"
      },
      {
        "_id": null,
        "model": "antivirus/filtering for domino mpe",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.2.2.27"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.5"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.5.6.14"
      },
      {
        "_id": null,
        "model": "mail security for smtp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.1"
      },
      {
        "_id": null,
        "model": "client security mr6",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.1"
      },
      {
        "_id": null,
        "model": "norton antivirus professional edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.0.1.74"
      },
      {
        "_id": null,
        "model": "norton systemworks",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1.4"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.59"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.394"
      },
      {
        "_id": null,
        "model": "web security for microsoft isa",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20045.0"
      },
      {
        "_id": null,
        "model": "client security mr4 mp1 build",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.1.4-4010"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.5.1100"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.6.368"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.2"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.1.4.32"
      },
      {
        "_id": null,
        "model": "antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.1"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.697"
      },
      {
        "_id": null,
        "model": "client security mr6 mp1 build",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.6-1100"
      },
      {
        "_id": null,
        "model": "norton systemworks",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20050"
      },
      {
        "_id": null,
        "model": "gateway security",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "54002.0.1"
      },
      {
        "_id": null,
        "model": "norton internet security professional edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2006"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2001"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.400"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.62"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for clearswift",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for isa",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.3"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for messaging",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20050"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0741"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.401"
      },
      {
        "_id": null,
        "model": "antivirus scan engine build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.34.3.3"
      },
      {
        "_id": null,
        "model": "mail security for domino build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.04.0.1"
      },
      {
        "_id": null,
        "model": "norton internet security professional edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "mail security for smtp",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.396"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for microsoft sharepoint",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.68"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.5"
      },
      {
        "_id": null,
        "model": "mail security for smtp patch",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.1181"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0465"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.1.4.24"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.2"
      },
      {
        "_id": null,
        "model": "norton antivirus",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0.9"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for network attached storage",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition mr6",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.1.2.28"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2000"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.4.4010"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for caching",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.3.1000"
      },
      {
        "_id": null,
        "model": "mail security appliance",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.0.24"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition for linux",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "0"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0736"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.1"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.5"
      },
      {
        "_id": null,
        "model": "norton internet security",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0.9"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.0.1.72"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1458"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.5743"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.18.43"
      },
      {
        "_id": null,
        "model": "norton antivirus professional edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "client security stm build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.09.0.0.338"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2020"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for microsoft isa",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "client security mr3 b9.0.3.1000",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.3"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.60"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.6.3"
      },
      {
        "_id": null,
        "model": "antivirus scan engine build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.34.3.7.27"
      },
      {
        "_id": null,
        "model": "web security",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.1.85"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.2.1000"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.1.1000"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0743"
      },
      {
        "_id": null,
        "model": "client security (scf",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.07.1)"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for microsoft sharepoint",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.5"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition mr6 mp1 build",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.6-1100"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.47"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.4"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.54.5.4.743"
      },
      {
        "_id": null,
        "model": "norton personal firewall",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20069.1.33"
      },
      {
        "_id": null,
        "model": "mail security series appliance",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "8200"
      },
      {
        "_id": null,
        "model": "norton system works premier",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2005"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.162"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.1.1008"
      },
      {
        "_id": null,
        "model": "client security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.51100"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.61"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2002"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.34.3.8.29"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for clearswift",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.17"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.63"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0.1"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for network attached storage",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0463"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1461"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.01.67"
      },
      {
        "_id": null,
        "model": "web security build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.13.0.1.70"
      },
      {
        "_id": null,
        "model": "client security mr2 b9.0.2.1000",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.2"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2011"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for caching",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "client security mr1 b9.0.1.1000",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.1"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0"
      },
      {
        "_id": null,
        "model": "norton internet security for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.2.2021"
      },
      {
        "_id": null,
        "model": "mail security for domino",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1.9.37"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.6.8.120"
      },
      {
        "_id": null,
        "model": "gateway security series",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "50003.0.1"
      },
      {
        "_id": null,
        "model": "norton internet security professional edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2004"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.1"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.1.1.1000"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for clearswift",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.4"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.1459"
      },
      {
        "_id": null,
        "model": "norton antivirus for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "9.0.0"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for messaging",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.0.0.359"
      },
      {
        "_id": null,
        "model": "norton system works",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "200511.0.9"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "5.0.0.024"
      },
      {
        "_id": null,
        "model": "norton system works for macintosh",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0"
      },
      {
        "_id": null,
        "model": "client security mr6 mp1",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.5741"
      },
      {
        "_id": null,
        "model": "antivirus scan engine for microsoft sharepoint",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.3.12"
      },
      {
        "_id": null,
        "model": "antivirus/filtering for domino mpe",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "3.0.12"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.5719"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.6.6000"
      },
      {
        "_id": null,
        "model": "antivirus corporate edition mr4 mp1 build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "10.1.4-4010"
      },
      {
        "_id": null,
        "model": "web security for microsoft isa",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "20045.0.3"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.64.6.1.107"
      },
      {
        "_id": null,
        "model": "brightmail anti-spam",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "6.0.3"
      },
      {
        "_id": null,
        "model": "client security mr4 build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "2.0.41000"
      },
      {
        "_id": null,
        "model": "mail security for microsoft exchange build",
        "scope": "eq",
        "trust": 0.3,
        "vendor": "symantec",
        "version": "4.0456"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      },
      {
        "db": "BID",
        "id": "24282"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      }
    ]
  },
  "configurations": {
    "_id": null,
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "cpe_match": [
              {
                "cpe22Uri": "cpe:/a:symantec:brightmail_antispam",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:client_security",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/h:symantec:gateway_security_5000_series",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:norton_antivirus",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:norton_internet_security",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:norton_personal_firewall",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:norton_system_works",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:symantec_antivirus_filtering_%2Bfor_domino",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:gateway_security_5400",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:mail_security",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:antivirus_scan_engine",
                "vulnerable": true
              },
              {
                "cpe22Uri": "cpe:/a:symantec:web_security",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      }
    ]
  },
  "credits": {
    "_id": null,
    "data": "Anonymous",
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      }
    ],
    "trust": 0.7
  },
  "cve": "CVE-2007-3699",
  "cvss": {
    "_id": null,
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "CVE-2007-3699",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 1.8,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "VHN-27061",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.1,
            "vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2007-3699",
            "trust": 1.0,
            "value": "HIGH"
          },
          {
            "author": "NVD",
            "id": "CVE-2007-3699",
            "trust": 0.8,
            "value": "High"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200710-086",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "VULHUB",
            "id": "VHN-27061",
            "trust": 0.1,
            "value": "HIGH"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      }
    ]
  },
  "description": {
    "_id": null,
    "data": "The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header. This vulnerability allows attackers to create a denial of service condition on software with vulnerable installations of the Symantec\u0027s AntiVirus engine. Authentication is not required to exploit this vulnerability.The specific flaw resides in a forged PACK_SIZE field of a RAR file header. These issues include a denial-of-service vulnerability and a buffer-overflow vulnerability. Symantec AntiVirus is a very popular antivirus solution. \n\n----------------------------------------------------------------------\n\nTry a new way to discover vulnerabilities that ALREADY EXIST in your\nIT infrastructure. \n\nThe Full Featured Secunia Network Software Inspector (NSI) is now\navailable:\nhttp://secunia.com/network_software_inspector/\n\nThe Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT\nvulnerabilities in more than 4,000 different Windows applications. \n\n----------------------------------------------------------------------\n\nTITLE:\nSymantec Products CAB and RAR Archive Handling Vulnerabilities\n\nSECUNIA ADVISORY ID:\nSA26053\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/26053/\n\nCRITICAL:\nHighly critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\n\u003eFrom remote\n\nOPERATING SYSTEM:\nSymantec Gateway Security 5400 Series 2.x\nhttp://secunia.com/product/6633/\nSymantec Gateway Security 5000 Series 3.x\nhttp://secunia.com/product/6648/\n\nSOFTWARE:\nSymantec Web Security 3.x\nhttp://secunia.com/product/2813/\nSymantec Scan Engine 5.x\nhttp://secunia.com/product/6651/\nSymantec Mail Security for SMTP 5.x\nhttp://secunia.com/product/13591/\nSymantec Mail Security for Microsoft Exchange 6.x\nhttp://secunia.com/product/14765/\nSymantec Mail Security for Microsoft Exchange 5.x\nhttp://secunia.com/product/6650/\nSymantec Mail Security for Exchange 4.x\nhttp://secunia.com/product/2820/\nSymantec Mail Security for Domino 5.x\nhttp://secunia.com/product/11179/\nSymantec Mail Security for Domino 4.x\nhttp://secunia.com/product/4624/\nSymantec Client Security 3.x\nhttp://secunia.com/product/6649/\nSymantec Client Security 2.x\nhttp://secunia.com/product/3478/\nSymantec Brightmail AntiSpam 6.x\nhttp://secunia.com/product/3656/\nSymantec Brightmail AntiSpam 5.x\nhttp://secunia.com/product/4628/\nSymantec Brightmail AntiSpam 4.x\nhttp://secunia.com/product/4627/\nSymantec AntiVirus/Filtering for Domino 3.x\nhttp://secunia.com/product/2029/\nSymantec AntiVirus Scan Engine 4.x\nhttp://secunia.com/product/3040/\nSymantec AntiVirus for Network Attached Storage 4.x\nhttp://secunia.com/product/4625/\nSymantec AntiVirus for Macintosh 10.x\nhttp://secunia.com/product/14768/\nSymantec AntiVirus Corporate Edition for Linux\nhttp://secunia.com/product/14767/\nSymantec AntiVirus Corporate Edition 9.x\nhttp://secunia.com/product/3549/\nSymantec AntiVirus Corporate Edition 10.x\nhttp://secunia.com/product/5555/\nSymantec Norton AntiVirus 2004\nhttp://secunia.com/product/2800/\nSymantec Norton AntiVirus 2005\nhttp://secunia.com/product/4009/\nSymantec Norton AntiVirus 2006\nhttp://secunia.com/product/6634/\nSymantec Norton Internet Security 2004\nhttp://secunia.com/product/2441/\nSymantec Norton Internet Security 2004 Professional\nhttp://secunia.com/product/2442/\nSymantec Norton Internet Security 2005\nhttp://secunia.com/product/4848/\nSymantec Norton Internet Security 2006\nhttp://secunia.com/product/6635/\nSymantec Norton SystemWorks 2004\nhttp://secunia.com/product/2796/\nSymantec Norton SystemWorks 2005\nhttp://secunia.com/product/4847/\nSymantec Norton SystemWorks 2006\nhttp://secunia.com/product/6636/\nSymantec Norton Personal Firewall 2006\nhttp://secunia.com/product/6638/\nSymantec Norton AntiVirus for Macintosh 9.x\nhttp://secunia.com/product/5948/\nSymantec Norton AntiVirus for Macintosh 10.x\nhttp://secunia.com/product/5949/\nSymantec Norton Internet Security for Macintosh 3.x\nhttp://secunia.com/product/5951/\nSymantec Norton SystemWorks for Macintosh 3.x\nhttp://secunia.com/product/5952/\n\nDESCRIPTION:\nTwo vulnerabilities have been reported in various Symantec products,\nwhich can be exploited by malicious people to cause a DoS (Denial of\nService) or potentially compromise a vulnerable system. \n\nThe vulnerabilities are reported in the following products and\nversions:\n* Symantec Mail Security 8200 (all builds)\n* Symantec Mail Security for Microsoft Exchange versions  4.6.3 and\nprior,  5.0.0.204, and 6.0.0 (all builds)\n* Symantec Mail Security for Domino NT versions  4.1.4 and prior and \n5.0.0.47 (all builds)\n* Symantec AntiVirus/Filtering for Domino MPE(AIX, Linux, Solaris)\nversions  3.0.12 and prior (all builds)\n* Symantec Scan Engine version 5.0.1 and prior (all builds)\n* Symantec AntiVirus Scan Engine versions 4.1.8 and prior and 4.3.12\nand prior (all builds)\n* Symantec AntiVirus Scan Engine for MS ISA versions 4.3.12 and prior\n(all builds)\n* Symantec AntiVirus Scan Engine for MS Sharepoint versions 4.3.12\nand prior (all builds)\n* Symantec AntiVirus Scan Engine for Messaging versions 4.3.12 and\nprior (all builds)\n* Symantec AntiVirus for Network Attached Storage versions 4.3.12 and\nprior (all builds)\n* Symantec AntiVirus Scan Engine for Clearswift versions 4.3.12 and\nprior (all builds)\n* Symantec AntiVirus Scan Engine for Caching versions 4.3.12 and\nprior (all builds)\n* Symantec Client Security versions 3.0, 3.x, and 2.x (all builds)\n* Symantec Web Security versions  3.0.1.76 and prior (all builds)\n* Symantec Gateway Security 5000 Series version 3.01 (all builds)\n* Symantec Gateway Security 5400 Series version 2.0.1 (all builds)\n* Symantec Brightmail AntiSpam versions 6.0.x, 5.5, and 4.x (all\nbuilds)\n* Symantec AntiVirus Corporate Edition versions 10.1, 10.0, and 9.0\n(10.1.5.5000 and prior and 9.0.6.1000 and prior)\n* Symantec AntiVirus Corperate Edition for Linux\n* Symantec AntiVirus for Macintosh version 10.x (all builds)\n* Symantec Web Security for Microsoft ISA 2004 version 5.0 (all\nbuilds)\n* Symantec Mail Security for SMTP version 5.0.0\n(Windows/Linux/Solaris) and 5.0.1 (all builds)\n* Norton AntiVirus 2004/2005/2006\n* Norton Internet Security 2004/2005/2005.5 AntiSpyware Edition/2006\n* Norton SystemWorks 2004/2005/2006\n* Norton Personal Firewall 2006\n* Norton AntiVirus for Macintosh versions 9.x and 10.x\n* Norton Internet Security for Macintosh version 3.x\n* Norton SystemWorks for Macintosh version 3.x\n\nSOLUTION:\nApply updates or run LiveUpdate. Please see the vendor\u0027s advisory for\ndetails. \n\nORIGINAL ADVISORY:\nSymantec:\nhttp://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n. ZDI-07-039: Symantec AntiVirus Engine RAR File Parsing DoS Vulnerability\nhttp://www.zerodayinitiative.com/advisories/ZDI-07-039.html\nJuly 12, 2007\n\n-- CVE ID:\nCVE-2007-3699\n\n-- Affected Vendor:\nSymantec\n\n-- Affected Products:\nSymantec AntiVirus Engine\n\n\n-- TippingPoint(TM) IPS Customer Protection:\nTippingPoint IPS customers have been protected against this\nvulnerability since November 20, 2006 by Digital Vaccine protection\nfilter ID 4695,4824. Authentication is not required to exploit this\nvulnerability. \n\n-- Vendor Response:\nSymantec has issued an update to correct this vulnerability. More\ndetails can be found at:\n\n    http://www.symantec.com/avcenter/security/Content/2007.07.11f.html\n\n-- Disclosure Timeline:\n2006.11.01 - Vulnerability reported to vendor\n2006.11.20 - Digital Vaccine released to TippingPoint customers\n2007.07.12 - Coordinated public release of advisory\n\n-- Credit:\nThis vulnerability was discovered by an anonymous researcher. \n\n-- About the Zero Day Initiative (ZDI):\nEstablished by TippingPoint, a division of 3Com, The Zero Day Initiative\n(ZDI) represents a best-of-breed model for rewarding security\nresearchers for responsibly disclosing discovered vulnerabilities. \n\nResearchers interested in getting paid for their security research\nthrough the ZDI can find more information and sign-up at:\n\n    http://www.zerodayinitiative.com\n\nThe ZDI is unique in how the acquired vulnerability information is used. \n3Com does not re-sell the vulnerability details or any exploit code. \nInstead, upon notifying the affected product vendor, 3Com provides its\ncustomers with zero day protection through its intrusion prevention\ntechnology. Explicit details regarding the specifics of the\nvulnerability are not exposed to any parties until an official vendor\npatch is publicly available. Furthermore, with the altruistic aim of\nhelping to secure a broader user base, 3Com provides this vulnerability\ninformation confidentially to security vendors (including competitors)\nwho have a vulnerability protection or mitigation product. \n\nCONFIDENTIALITY NOTICE: This e-mail message, including any attachments,\nis being sent by 3Com for the sole use of the intended recipient(s) and\nmay contain confidential, proprietary and/or privileged information. \nAny unauthorized review, use, disclosure and/or distribution by any \nrecipient is prohibited.  If you are not the intended recipient, please\ndelete and/or destroy all copies of this message regardless of form and\nany included attachments and notify 3Com immediately by contacting the\nsender via reply e-mail or forwarding to 3Com at postmaster@3com.com",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      },
      {
        "db": "BID",
        "id": "24282"
      },
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      },
      {
        "db": "PACKETSTORM",
        "id": "57696"
      },
      {
        "db": "PACKETSTORM",
        "id": "57731"
      }
    ],
    "trust": 2.79
  },
  "exploit_availability": {
    "_id": null,
    "data": [
      {
        "reference": "https://www.scap.org.cn/vuln/vhn-27061",
        "trust": 0.1,
        "type": "unknown"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      }
    ]
  },
  "external_ids": {
    "_id": null,
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2007-3699",
        "trust": 3.6
      },
      {
        "db": "ZDI",
        "id": "ZDI-07-039",
        "trust": 2.8
      },
      {
        "db": "BID",
        "id": "24282",
        "trust": 2.0
      },
      {
        "db": "SECUNIA",
        "id": "26053",
        "trust": 1.8
      },
      {
        "db": "VUPEN",
        "id": "ADV-2007-2508",
        "trust": 1.7
      },
      {
        "db": "OSVDB",
        "id": "36119",
        "trust": 1.1
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849",
        "trust": 0.8
      },
      {
        "db": "ZDI_CAN",
        "id": "ZDI-CAN-097",
        "trust": 0.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086",
        "trust": 0.7
      },
      {
        "db": "ZDI",
        "id": "ZDI-07-040",
        "trust": 0.3
      },
      {
        "db": "PACKETSTORM",
        "id": "57731",
        "trust": 0.2
      },
      {
        "db": "VULHUB",
        "id": "VHN-27061",
        "trust": 0.1
      },
      {
        "db": "PACKETSTORM",
        "id": "57696",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      },
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      },
      {
        "db": "BID",
        "id": "24282"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "PACKETSTORM",
        "id": "57696"
      },
      {
        "db": "PACKETSTORM",
        "id": "57731"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      }
    ]
  },
  "id": "VAR-200710-0500",
  "iot": {
    "_id": null,
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2024-11-23T22:24:06.639000Z",
  "patch": {
    "_id": null,
    "data": [
      {
        "title": "SYM07-019",
        "trust": 0.8,
        "url": "http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html"
      },
      {
        "title": "Symantec has issued an update to correct this vulnerability.",
        "trust": 0.7,
        "url": "http://www.symantec.com/avcenter/security/Content/2007.07.11f.html"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      }
    ]
  },
  "problemtype_data": {
    "_id": null,
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      },
      {
        "problemtype": "CWE-DesignError",
        "trust": 0.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      }
    ]
  },
  "references": {
    "_id": null,
    "data": [
      {
        "trust": 2.1,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-07-039.html"
      },
      {
        "trust": 1.8,
        "url": "http://securityresponse.symantec.com/avcenter/security/content/2007.07.11f.html"
      },
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/24282"
      },
      {
        "trust": 1.7,
        "url": "http://secunia.com/advisories/26053"
      },
      {
        "trust": 1.1,
        "url": "http://www.symantec.com/avcenter/security/content/2007.07.11f.html"
      },
      {
        "trust": 1.1,
        "url": "http://osvdb.org/36119"
      },
      {
        "trust": 1.1,
        "url": "http://www.vupen.com/english/advisories/2007/2508"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3699"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2007-3699"
      },
      {
        "trust": 0.6,
        "url": "http://www.frsirt.com/english/advisories/2007/2508"
      },
      {
        "trust": 0.3,
        "url": "http://www.symantec.com"
      },
      {
        "trust": 0.3,
        "url": "http://www.zerodayinitiative.com/advisories/zdi-07-040.html"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6648/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4009/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/network_software_inspector/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6633/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2800/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2796/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6649/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6636/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/3478/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4847/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/14765/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4848/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/26053/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/13591/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2442/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6634/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6650/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/about_secunia_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/11179/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6638/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4625/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/14768/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/3549/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2441/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5949/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2820/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/14767/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4628/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6651/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2813/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/2029/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/3656/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/6635/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5951/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/3040/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4627/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5952/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5555/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/4624/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/product/5948/"
      },
      {
        "trust": 0.1,
        "url": "https://nvd.nist.gov/vuln/detail/cve-2007-3699"
      },
      {
        "trust": 0.1,
        "url": "http://www.tippingpoint.com"
      },
      {
        "trust": 0.1,
        "url": "http://www.zerodayinitiative.com"
      }
    ],
    "sources": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039"
      },
      {
        "db": "VULHUB",
        "id": "VHN-27061"
      },
      {
        "db": "BID",
        "id": "24282"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      },
      {
        "db": "PACKETSTORM",
        "id": "57696"
      },
      {
        "db": "PACKETSTORM",
        "id": "57731"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699"
      }
    ]
  },
  "sources": {
    "_id": null,
    "data": [
      {
        "db": "ZDI",
        "id": "ZDI-07-039",
        "ident": null
      },
      {
        "db": "VULHUB",
        "id": "VHN-27061",
        "ident": null
      },
      {
        "db": "BID",
        "id": "24282",
        "ident": null
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "57696",
        "ident": null
      },
      {
        "db": "PACKETSTORM",
        "id": "57731",
        "ident": null
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086",
        "ident": null
      },
      {
        "db": "NVD",
        "id": "CVE-2007-3699",
        "ident": null
      }
    ]
  },
  "sources_release_date": {
    "_id": null,
    "data": [
      {
        "date": "2007-07-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-07-039",
        "ident": null
      },
      {
        "date": "2007-10-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-27061",
        "ident": null
      },
      {
        "date": "2007-07-11T00:00:00",
        "db": "BID",
        "id": "24282",
        "ident": null
      },
      {
        "date": "2012-12-20T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2007-005849",
        "ident": null
      },
      {
        "date": "2007-07-13T00:55:11",
        "db": "PACKETSTORM",
        "id": "57696",
        "ident": null
      },
      {
        "date": "2007-07-13T21:58:15",
        "db": "PACKETSTORM",
        "id": "57731",
        "ident": null
      },
      {
        "date": "2007-07-11T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200710-086",
        "ident": null
      },
      {
        "date": "2007-10-05T21:17:00",
        "db": "NVD",
        "id": "CVE-2007-3699",
        "ident": null
      }
    ]
  },
  "sources_update_date": {
    "_id": null,
    "data": [
      {
        "date": "2007-07-12T00:00:00",
        "db": "ZDI",
        "id": "ZDI-07-039",
        "ident": null
      },
      {
        "date": "2012-10-31T00:00:00",
        "db": "VULHUB",
        "id": "VHN-27061",
        "ident": null
      },
      {
        "date": "2015-03-19T08:49:00",
        "db": "BID",
        "id": "24282",
        "ident": null
      },
      {
        "date": "2012-12-20T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2007-005849",
        "ident": null
      },
      {
        "date": "2007-10-08T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200710-086",
        "ident": null
      },
      {
        "date": "2024-11-21T00:33:51.380000",
        "db": "NVD",
        "id": "CVE-2007-3699",
        "ident": null
      }
    ]
  },
  "threat_type": {
    "_id": null,
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "_id": null,
    "data": "Symantec Product  Decomposer Service disruption in components  (DoS) Vulnerabilities",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2007-005849"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "_id": null,
    "data": "lack of information",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200710-086"
      }
    ],
    "trust": 0.6
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.