CVE-2004-0364

high

Description

The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/15538

http://www.securityfocus.com/bid/9915

http://www.sarc.com/avcenter/security/Content/2004.03.19.html

http://www.nextgenss.com/advisories/nisrce.txt

http://www.kb.cert.org/vuls/id/549054

http://secunia.com/advisories/11168

http://marc.info/?l=bugtraq&m=107980262324362&w=2

http://marc.info/?l=bugtraq&m=107970885922442&w=2

Details

Source: Mitre, NVD

Published: 2004-04-15

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H