CVE Vulnerability

CVE-2007-1689

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.

10 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://www.symantec.com/avcenter/security/Content/2007.05.16.html Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/983953 US Government Resource
http://www.securityfocus.com/bid/23936
http://www.securitytracker.com/id?1018073
http://secunia.com/advisories/25290 Vendor Advisory
http://osvdb.org/36164
http://www.vupen.com/english/advisories/2007/1843
https://exchange.xforce.ibmcloud.com/vulnerabilities/34328
http://www.securityfocus.com/archive/1/468779/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*
cpe:2.3:a:symantec:norton_personal_firewall:2004:*:*:*:*:*:*:*
Information

Published : 2007-05-16 08:30

Updated : 2018-10-16 04:40

NVD link : CVE-2007-1689

Mitre link : CVE-2007-1689

Products Affected
No products.
CWE
NVD-CWE-Other