CVEvulnerability

CVE-2005-0249

7.5 HIGH Published 2005-02-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-02-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Affected configurations

• symantec antivirus scan engine (< 4.3.3) • symantec brightmail antispam 4.0 • symantec brightmail antispam 5.5 • symantec client security 1.0.1 build 8.01.434 • symantec client security 1.0.1 build 8.01.437 • symantec client security 1.0.1 build 8.01.446 • symantec client security 1.0.1 build 8.01.457 • symantec client security 1.0.1 build 8.01.460 • symantec client security 1.0.1 build 8.01.464 • symantec client security 1.0.1 build 8.01.471 • symantec client security 1.1.1 mr1 build 8.1.1.314a • symantec client security 1.1.1 mr2 build 8.1.1.319 • symantec client security 1.1.1 mr3 build 8.1.1.323 • symantec client security 1.1.1 mr4 build 8.1.1.329 • symantec client security 1.1.1 mr5 build 8.1.1.336 • symantec gateway security 1.0 • symantec gateway security 2.0 • symantec gateway security 2.0.1 • symantec mail security 4.0 • symantec mail security 4.1 • symantec mail security 4.5 build 719 • symantec norton antivirus 2.18 build 83 • symantec norton antivirus 8.1.1.319 • symantec norton antivirus 8.1.1.323 • symantec norton antivirus 8.1.1.329 • symantec norton antivirus 8.1.1 build8.1.1.314a • symantec norton antivirus 8.01.434 • symantec norton antivirus 8.01.437 • symantec norton antivirus 8.01.446 • symantec norton antivirus 8.01.457 • symantec norton antivirus 8.01.460 • symantec norton antivirus 8.01.464 • symantec norton antivirus 8.01.471 • symantec norton antivirus 9.0 • symantec norton antivirus 2004 • symantec norton internet security 2004 • symantec norton system works 2004 • symantec sav filter domino nt ports build3.0.5 • symantec sav filter for domino nt 3.1.1 • symantec web security 3.01.59 • symantec web security 3.01.60 • symantec web security 3.01.61 • symantec web security 3.01.62 • symantec web security 3.01.63 • symantec web security 3.01.67 • symantec web security 3.01.68

References