Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:*

part: a version: 3.1.396 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductClient Security (54139b4f-9e59-503b-ab5e-768316dcaf96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0107 vulnerable 2026-06-08 04:51:52.984612 Details available
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."
Published: 2010-02-23T20:00:00.000Z
Updated: 2024-08-07T00:37:53.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.619776 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3095 vulnerable 2026-06-08 04:49:46.807843 Details available
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Published: 2007-06-06T22:00:00.000Z
Updated: 2024-08-07T14:05:29.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3022 vulnerable 2026-06-08 04:49:46.688106 Details available
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, displays the password hash for a user after a failed login attempt, which makes it easier for remote attackers to conduct brute force attacks.
Published: 2007-06-05T21:00:00.000Z
Updated: 2024-08-07T13:57:54.996Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3021 vulnerable 2026-06-08 04:49:46.684794 Details available
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
Published: 2007-06-05T21:00:00.000Z
Updated: 2024-08-07T13:57:54.930Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1793 vulnerable 2026-06-08 04:49:43.470475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1476 vulnerable 2026-06-08 04:49:42.653926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.145173 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.