CVE-2009-1428 : Detail

CVE-2009-1428

Cross-site Scripting
A03-Injection
1.18%V3
Network
2009-04-29
13h00 +00:00
2017-08-16
12h57 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrics

Metrics Score Severity CVSS Vector Source
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Products Mentioned

Configuraton 0

Symantec>>Antivirus >> Version To (including) 10.1

Symantec>>Antivirus >> Version 10.0

    Symantec>>Antivirus >> Version 10.0.1

      Symantec>>Antivirus >> Version 10.0.1.1

        Symantec>>Antivirus >> Version 10.0.2

          Symantec>>Antivirus >> Version 10.0.2.1

            Symantec>>Antivirus >> Version 10.0.2.2

              Symantec>>Antivirus >> Version 10.0.3

                Symantec>>Antivirus >> Version 10.0.4

                  Symantec>>Antivirus >> Version 10.0.5

                    Symantec>>Antivirus >> Version 10.0.6

                      Symantec>>Antivirus >> Version 10.0.7

                        Symantec>>Antivirus >> Version 10.0.8

                          Symantec>>Antivirus >> Version 10.0.9

                            Symantec>>Endpoint_protection >> Version 11.0

                            Symantec>>Norton_360 >> Version 1.0

                              Symantec>>Norton_internet_security >> Version 2005

                                Symantec>>Norton_internet_security >> Version 2005

                                  Symantec>>Norton_internet_security >> Version 2005

                                    Symantec>>Norton_internet_security >> Version 2005

                                      Symantec>>Norton_internet_security >> Version 2005

                                        Symantec>>Norton_internet_security >> Version 2005_contains_nav_11.0.0

                                          Symantec>>Norton_internet_security >> Version 2006

                                            Symantec>>Norton_internet_security >> Version 2006

                                              Symantec>>Norton_internet_security >> Version 2007

                                                Symantec>>Norton_internet_security >> Version 2008

                                                  References

                                                  http://www.vupen.com/english/advisories/2009/1203
                                                  Tags : vdb-entry, x_refsource_VUPEN
                                                  http://www.securityfocus.com/bid/34669
                                                  Tags : vdb-entry, x_refsource_BID
                                                  http://www.securitytracker.com/id?1022135
                                                  Tags : vdb-entry, x_refsource_SECTRACK
                                                  http://www.securitytracker.com/id?1022134
                                                  Tags : vdb-entry, x_refsource_SECTRACK
                                                  http://www.securitytracker.com/id?1022133
                                                  Tags : vdb-entry, x_refsource_SECTRACK
                                                  http://secunia.com/advisories/34936
                                                  Tags : third-party-advisory, x_refsource_SECUNIA
                                                  http://osvdb.org/54132
                                                  Tags : vdb-entry, x_refsource_OSVDB