Symantec Mail Security KeyView PRZ Processing Buffer Overflow
High Nessus Plugin ID 55047
SynopsisThe remote Windows host has an application that is affected by a buffer overflow vulnerability.
DescriptionThe file attachment filter component included with the instance of Symantec Mail Security installed on the remote Windows host is reportedly affected by a buffer overflow vulnerability that can be triggered when handling attachments of various types.
By sending an email with a specially crafted attachment through a vulnerable server, an attacker may be able to execute arbitrary code subject to the privileges under which the affected daemon runs.
SolutionIf using Symantec Mail Security for Domino, upgrade to version 7.5.11 / 8.0.8.
If using Symantec Mail Security for Microsoft Exchange, upgrade to version 6.0.12 / 6.5.5.