Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:2.0.4:*:*:*:*:*:*:*

part: a version: 2.0.4 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductClient Security (54139b4f-9e59-503b-ab5e-768316dcaf96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.611015 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1476 vulnerable 2026-06-08 04:49:42.639531 Details available
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Published: 2007-03-16T21:00:00.000Z
Updated: 2024-08-07T12:59:08.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.135609 Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4802 vulnerable 2026-06-08 04:49:18.840492 Details available
Format string vulnerability in the Real Time Virus Scan service in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allows local users to execute arbitrary code via an unspecified vector related to alert notification messages, a different vector than CVE-2006-3454, a "second format string vulnerability" as found by the vendor.
Published: 2006-09-14T22:00:00.000Z
Updated: 2024-08-07T19:23:41.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3454 vulnerable 2026-06-08 04:49:09.354835 Details available
Multiple format string vulnerabilities in Symantec AntiVirus Corporate Edition 8.1 up to 10.0, and Client Security 1.x up to 3.0, allow local users to execute arbitrary code via format strings in (1) Tamper Protection and (2) Virus Alert Notification messages.
Published: 2006-09-14T00:00:00.000Z
Updated: 2024-08-07T18:30:34.302Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.