CVE-2007-3021

Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.

Link	Resource
http://www.symantec.com/avcenter/security/Content/2007.06.05a.html	Patch Vendor Advisory
http://www.securityfocus.com/bid/24313
http://www.securitytracker.com/id?1018196
http://secunia.com/advisories/25543
http://www.vupen.com/english/advisories/2007/2074
http://osvdb.org/36109
https://exchange.xforce.ibmcloud.com/vulnerabilities/34744

Configuration 1

cpe:2.3:a:symantec:norton_antivirus:10.1:*:corporate:*:*:*:*:* cpe:2.3:a:symantec:norton_antivirus:10.1.400:*:corporate:*:*:*:*:* cpe:2.3:a:symantec:norton_antivirus:10.1.401:*:corporate:*:*:*:*:* cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:* cpe:2.3:a:symantec:norton_antivirus:10.1.396:*:corporate:*:*:*:*:* cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:* cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:* cpe:2.3:a:symantec:reporting_server:*:*:*:*:*:*:*:* cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:* cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:* cpe:2.3:a:symantec:norton_antivirus:10.0.2.2021:*:corporate:*:*:*:*:*

---

Published : 2007-06-05 09:30

Updated : 2017-07-29 01:31

---

NVD link : CVE-2007-3021

Mitre link : CVE-2007-3021

No products.

NVD-CWE-Other