GCVE - cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*

part: a version: 3.01.63 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Web Security (`ceaf36f6-df5f-5150-93cd-8818e5b4cd3d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-3699`	vulnerable	2026-06-08 04:49:54.672673	Details available The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header. Published: 2007-10-05T21:00:00.000Z Updated: 2024-08-07T14:28:52.091Z Open on db.gcve.eu Reference links http://secunia.com/advisories/26053 http://www.vupen.com/english/advisories/2007/2508 http://osvdb.org/36119 http://www.zerodayinitiative.com/advisories/ZDI-07-039.html http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0564`	vulnerable	2026-06-08 04:49:32.804596	Details available The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumption) by submitting a large file. Published: 2007-01-30T16:00:00.000Z Updated: 2024-08-07T12:26:53.282Z Open on db.gcve.eu Reference links http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html http://www.vupen.com/english/advisories/2007/0330 http://secunia.com/advisories/23896 http://securitytracker.com/id?1017558	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0563`	vulnerable	2026-06-08 04:49:32.802501	Details available Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) error messages and (2) blocked page messages produced by SWS. Published: 2007-01-30T16:00:00.000Z Updated: 2024-08-07T12:26:53.243Z Open on db.gcve.eu Reference links http://securityresponse.symantec.com/avcenter/security/Content/2007.01.24c.html http://www.vupen.com/english/advisories/2007/0330 http://secunia.com/advisories/23896 http://osvdb.org/32960 http://securitytracker.com/id?1017558	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-0447`	vulnerable	2026-06-08 04:49:32.207740	Details available Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives. Published: 2007-10-05T21:00:00.000Z Updated: 2024-08-07T12:19:30.204Z Open on db.gcve.eu Reference links http://secunia.com/advisories/26053 http://www.vupen.com/english/advisories/2007/2508 http://osvdb.org/36118 http://www.zerodayinitiative.com/advisories/ZDI-07-040.html http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0249`	vulnerable	2026-06-08 04:48:12.126670	Details available Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header. Published: 2005-02-08T05:00:00.000Z Updated: 2024-08-07T21:05:25.457Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/107822 http://xforce.iss.net/xforce/alerts/id/187 http://securitytracker.com/id?1013133 https://exchange.xforce.ibmcloud.com/vulnerabilities/18869 http://www.symantec.com/avcenter/security/Content/2005.02.08.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.