Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:client_security:2.0.1_build_9.0.1.1000:mr1:*:*:*:*:*:*

part: a version: 2.0.1_build_9.0.1.1000 update: mr1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductClient Security (54139b4f-9e59-503b-ab5e-768316dcaf96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.609486 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-1476 vulnerable 2026-06-08 04:49:42.637146 Details available
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Published: 2007-03-16T21:00:00.000Z
Updated: 2024-08-07T12:59:08.338Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.134089 Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4855 vulnerable 2026-06-08 04:49:19.038473 Details available
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Published: 2006-09-19T18:00:00.000Z
Updated: 2024-08-07T19:23:41.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-3455 vulnerable 2026-06-08 04:49:09.364594 Details available
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Published: 2006-10-23T20:00:00.000Z
Updated: 2024-08-07T18:30:33.727Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.