Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.

The remote host is running a version of the Symantec Mail Security for Exchange / Domino that is affected by multiple vulnerabilities :

  - A heap overflow vulnerability exists that can be     triggered when the scanning engine processes a specially     crafted CAB file, possibly leading to arbitrary code     execution. (CVE-2007-0447)

  - It is is possible to trigger a denial of service     condition when the scanning engine processes a RAR file     with a specially crafted header. (CVE-2007-3699)

ID	Name	Product	Family	Severity
67004	Symantec Mail Security for Exchange / Domino RAR and CAB Multiple Vulnerabilities	Nessus	Windows	high
67003	Symantec Mail Security for SMTP RAR and CAB Parsing Multiple Vulnerabilities	Nessus	Windows	high
67002	Symantec Antivirus Scan Engine RAR and CAB Parsing Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2007-0447

critical

Tenable Plugins

high

high

high