CVE-2007-2955

Description

Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/35944

http://www.vupen.com/english/advisories/2007/2822

http://www.symantec.com/avcenter/security/Content/2007.08.09.html

http://www.securitytracker.com/id?1018547

http://www.securitytracker.com/id?1018546

http://www.securitytracker.com/id?1018545

http://www.securityfocus.com/bid/24983

http://secunia.com/secunia_research/2007-53/advisory/

http://secunia.com/advisories/25215

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS