CVE-2007-0447 Detail

CVE-2007-0447

CVE Descriptions

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

CVE Informations

Related Weaknesses

CWE-ID	Weakness Name	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Metrics

Metrics	Score	Severity	CVSS Vector	Source
V2	9.3		AV:N/AC:M/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Symantec>>Antivirus_scan_engine >> Version 4.0

Symantec>>Antivirus_scan_engine >> Version 4.0 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.0

Symantec>>Antivirus_scan_engine >> Version 4.1

Symantec>>Antivirus_scan_engine >> Version 4.1 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.1.8

Symantec>>Antivirus_scan_engine >> Version 4.1.8 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3

Symantec>>Antivirus_scan_engine >> Version 4.3 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3

Symantec>>Antivirus_scan_engine >> Version 4.3.3

Symantec>>Antivirus_scan_engine >> Version 4.3.3 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3.7.27

Symantec>>Antivirus_scan_engine >> Version 4.3.7.27 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3.8.29

Symantec>>Antivirus_scan_engine >> Version 4.3.8.29 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3.12

Symantec>>Antivirus_scan_engine >> Version 4.3.12 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 4.3.12

Symantec>>Antivirus_scan_engine >> Version 5.0

Symantec>>Antivirus_scan_engine >> Version 5.0 (Open CPE detail)

Symantec>>Antivirus_scan_engine >> Version 5.0.1

Symantec>>Antivirus_scan_engine >> Version 5.0.1 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 4.0

Symantec>>Brightmail_antispam >> Version 4.0 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 5.5

Symantec>>Brightmail_antispam >> Version 5.5 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 6.0

Symantec>>Brightmail_antispam >> Version 6.0 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 6.0.1

Symantec>>Brightmail_antispam >> Version 6.0.1 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 6.0.2

Symantec>>Brightmail_antispam >> Version 6.0.2 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 6.0.3

Symantec>>Brightmail_antispam >> Version 6.0.3 (Open CPE detail)

Symantec>>Brightmail_antispam >> Version 6.0.4

Symantec>>Brightmail_antispam >> Version 6.0.4 (Open CPE detail)

Symantec>>Client_security >> Version 2.0

Symantec>>Client_security >> Version 2.0 (Open CPE detail)

Symantec>>Client_security >> Version 2.0

Symantec>>Client_security >> Version 2.0.1_build_9.0.1.1000

Symantec>>Client_security >> Version 2.0.1_build_9.0.1.1000 (Open CPE detail)

Symantec>>Client_security >> Version 2.0.2_build_9.0.2.1000

Symantec>>Client_security >> Version 2.0.2_build_9.0.2.1000 (Open CPE detail)

Symantec>>Client_security >> Version 2.0.3_build_9.0.3.1000

Symantec>>Client_security >> Version 2.0.3_build_9.0.3.1000 (Open CPE detail)

Symantec>>Client_security >> Version 2.0.4

Symantec>>Client_security >> Version 2.0.4 (Open CPE detail)

Symantec>>Client_security >> Version 2.0.4

Symantec>>Client_security >> Version 2.0.5_build_1100_mp1

Symantec>>Client_security >> Version 2.0.5_build_1100_mp1 (Open CPE detail)

Symantec>>Client_security >> Version 2.0.6

Symantec>>Client_security >> Version 2.0.6 (Open CPE detail)

Symantec>>Client_security >> Version 3.0

Symantec>>Client_security >> Version 3.0 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.0.359

Symantec>>Client_security >> Version 3.0.0.359 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.1.1000

Symantec>>Client_security >> Version 3.0.1.1000 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.1.1001

Symantec>>Client_security >> Version 3.0.1.1001 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.1.1007

Symantec>>Client_security >> Version 3.0.1.1007 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.1.1008

Symantec>>Client_security >> Version 3.0.1.1008 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2000

Symantec>>Client_security >> Version 3.0.2.2000 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2001

Symantec>>Client_security >> Version 3.0.2.2001 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2002

Symantec>>Client_security >> Version 3.0.2.2002 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2010

Symantec>>Client_security >> Version 3.0.2.2010 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2011

Symantec>>Client_security >> Version 3.0.2.2011 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2020

Symantec>>Client_security >> Version 3.0.2.2020 (Open CPE detail)

Symantec>>Client_security >> Version 3.0.2.2021

Symantec>>Client_security >> Version 3.0.2.2021 (Open CPE detail)

Symantec>>Client_security >> Version 3.1

Symantec>>Client_security >> Version 3.1 (Open CPE detail)
Symantec>>Client_security >> Version 3.1 (Open CPE detail)
Symantec>>Client_security >> Version 3.1 (Open CPE detail)

Symantec>>Client_security >> Version 3.1.394

Symantec>>Client_security >> Version 3.1.394 (Open CPE detail)

Symantec>>Client_security >> Version 3.1.396

Symantec>>Client_security >> Version 3.1.396 (Open CPE detail)

Symantec>>Client_security >> Version 3.1.400

Symantec>>Client_security >> Version 3.1.400 (Open CPE detail)

Symantec>>Client_security >> Version 3.1.401

Symantec>>Mail_security >> Version 4.0

Symantec>>Mail_security >> Version 4.0 (Open CPE detail)

Symantec>>Mail_security >> Version 4.0

Symantec>>Mail_security >> Version 4.0.1

Symantec>>Mail_security >> Version 4.1

Symantec>>Mail_security >> Version 4.5

Symantec>>Mail_security >> Version 4.5.4.743

Symantec>>Mail_security >> Version 4.5_build_719

Symantec>>Mail_security >> Version 4.5_build_719 (Open CPE detail)

Symantec>>Mail_security >> Version 4.5_build_736

Symantec>>Mail_security >> Version 4.5_build_736 (Open CPE detail)

Symantec>>Mail_security >> Version 4.5_build_741

Symantec>>Mail_security >> Version 4.5_build_741 (Open CPE detail)

Symantec>>Mail_security >> Version 4.6.1.107

Symantec>>Mail_security >> Version 4.6.3

Symantec>>Mail_security >> Version 4.6_build_97

Symantec>>Mail_security >> Version 4.6_build_97 (Open CPE detail)

Symantec>>Mail_security >> Version 5.0

Symantec>>Mail_security >> Version 5.0.0.204

Symantec>>Mail_security >> Version 5.0.1

Symantec>>Mail_security >> Version 5.1.0

Symantec>>Mail_security >> Version 6.0.0

Symantec>>Norton_antivirus >> Version *

Symantec>>Norton_antivirus >> Version 9.0

Symantec>>Norton_antivirus >> Version 9.0.0

Symantec>>Norton_antivirus >> Version 9.0.0.338

Symantec>>Norton_antivirus >> Version 9.0.1

Symantec>>Norton_antivirus >> Version 9.0.1.1.1000

Symantec>>Norton_antivirus >> Version 9.0.2

Symantec>>Norton_antivirus >> Version 9.0.2.1000

Symantec>>Norton_antivirus >> Version 9.0.3

Symantec>>Norton_antivirus >> Version 9.0.3.1000

Symantec>>Norton_antivirus >> Version 9.0.4

Symantec>>Norton_antivirus >> Version 9.0.4 (Open CPE detail)

Symantec>>Norton_antivirus >> Version 9.0.4

Symantec>>Norton_antivirus >> Version 9.0.4 (Open CPE detail)

Symantec>>Norton_antivirus >> Version 9.0.5

Symantec>>Norton_antivirus >> Version 9.0.5.1100

Symantec>>Norton_antivirus >> Version 9.0.6.1000

Symantec>>Norton_antivirus >> Version 10.0

Symantec>>Norton_antivirus >> Version 10.0.0

Symantec>>Norton_antivirus >> Version 10.0.0.359

Symantec>>Norton_antivirus >> Version 10.0.1

Symantec>>Norton_antivirus >> Version 10.0.1.1000

Symantec>>Norton_antivirus >> Version 10.0.1.1007

Symantec>>Norton_antivirus >> Version 10.0.1.1008

Symantec>>Norton_antivirus >> Version 10.0.2.2000

Symantec>>Norton_antivirus >> Version 10.0.2.2001

Symantec>>Norton_antivirus >> Version 10.0.2.2002

Symantec>>Norton_antivirus >> Version 10.0.2.2010

Symantec>>Norton_antivirus >> Version 10.0.2.2011

Symantec>>Norton_antivirus >> Version 10.0.2.2020

Symantec>>Norton_antivirus >> Version 10.0.2.2021

Symantec>>Norton_antivirus >> Version 10.1

Symantec>>Norton_antivirus >> Version 10.1.4

Symantec>>Norton_antivirus >> Version 10.1.4.4010

Symantec>>Norton_antivirus >> Version 10.1.394

Symantec>>Norton_antivirus >> Version 10.1.396

Symantec>>Norton_antivirus >> Version 10.1.400

Symantec>>Norton_antivirus >> Version 10.1.401

Symantec>>Norton_antivirus >> Version 10.9.1

Symantec>>Norton_antivirus >> Version 2004

Symantec>>Norton_antivirus >> Version 2004 (Open CPE detail)

Symantec>>Norton_antivirus >> Version 2004

Symantec>>Norton_antivirus >> Version 2005

Symantec>>Norton_antivirus >> Version 2006

Symantec>>Norton_internet_security >> Version 3.0

Symantec>>Norton_internet_security >> Version 2004

Symantec>>Norton_internet_security >> Version 2004 (Open CPE detail)

Symantec>>Norton_internet_security >> Version 2004

Symantec>>Norton_internet_security >> Version 2004 (Open CPE detail)

Symantec>>Norton_internet_security >> Version 2005

Symantec>>Norton_internet_security >> Version 2006

Symantec>>Norton_personal_firewall >> Version 2006

Symantec>>Norton_personal_firewall >> Version 2006_9.1.0.33

Symantec>>Norton_personal_firewall >> Version 2006_9.1.1.7

Symantec>>Norton_system_works >> Version 3.0

Symantec>>Norton_system_works >> Version 2004

Symantec>>Norton_system_works >> Version 2004 (Open CPE detail)

Symantec>>Norton_system_works >> Version 2005

Symantec>>Norton_system_works >> Version 2006

Symantec>>Symantec_antivirus_filtering_\+for_domino >> Version 3.0.12

Symantec>>Web_security >> Version 2.5

Symantec>>Web_security >> Version 3.0

Symantec>>Web_security >> Version 3.0.1

Symantec>>Web_security >> Version 3.0.1.70

Symantec>>Web_security >> Version 3.0.1.76

Symantec>>Web_security >> Version 3.0.1_build_3.01.70

Symantec>>Web_security >> Version 3.0.1_build_3.01.72

Symantec>>Web_security >> Version 3.0.1_build_3.01.74

Symantec>>Web_security >> Version 3.01.59

Symantec>>Web_security >> Version 3.01.59 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.60

Symantec>>Web_security >> Version 3.01.60 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.61

Symantec>>Web_security >> Version 3.01.61 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.62

Symantec>>Web_security >> Version 3.01.62 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.63

Symantec>>Web_security >> Version 3.01.63 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.67

Symantec>>Web_security >> Version 3.01.67 (Open CPE detail)

Symantec>>Web_security >> Version 3.01.68

Symantec>>Web_security >> Version 3.01.68 (Open CPE detail)

Symantec>>Web_security >> Version 5.0

Configuraton 0

Symantec>>Gateway_security_5000_series >> Version 3.0.1

Symantec>>Gateway_security_5400 >> Version 2.0.1

Symantec>>Mail_security_8820_appliance >> Version *

Symantec>>Mail_security_8820_appliance >> Version - (Open CPE detail)

References

http://secunia.com/advisories/26053
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/2508
Tags : vdb-entry, x_refsource_VUPEN

http://osvdb.org/36118
Tags : vdb-entry, x_refsource_OSVDB

http://www.zerodayinitiative.com/advisories/ZDI-07-040.html
Tags : x_refsource_MISC

http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
Tags : x_refsource_CONFIRM

http://www.securityfocus.com/bid/24282
Tags : vdb-entry, x_refsource_BID

CVE-2007-0447 : Detail

CVE-2007-0447

CVE Descriptions

CVE Informations

Related Weaknesses

Metrics

EPSS

EPSS Score

EPSS Percentile

Products Mentioned

Configuraton 0

Configuraton 0

References