CVE-2010-0107

Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."

• symantec client security 3.0 • symantec client security 3.0.1.1000 • symantec client security 3.0.1.1001 • symantec client security 3.0.1.1007 • symantec client security 3.0.1.1008 • symantec client security 3.0.1.1009 • symantec client security 3.0.2 • symantec client security 3.0.2.2000 • symantec client security 3.0.2.2001 • symantec client security 3.0.2.2002 • symantec client security 3.0.2.2010 • symantec client security 3.0.2.2011 • symantec client security 3.0.2.2020 • symantec client security 3.0.2.2021 • symantec client security 3.1 • symantec client security 3.1.0.396 • symantec client security 3.1.0.401 • symantec client security 3.1.396 • symantec client security 3.1.400 • symantec client security 3.1.401 • symantec norton 360 1.0 • symantec norton 360 2.0 • symantec norton antivirus 2006 • symantec norton antivirus 2007 • symantec norton antivirus 2008 • symantec norton internet security 2006 • symantec norton internet security 2007 • symantec norton internet security 2008