GCVE - cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:norton_antivirus:2003:*:*:*:*:*:*:*

part: a version: 2003 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Norton Antivirus (`122a4eba-755b-5ae1-9776-f31bcb6ba06a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-4855`	vulnerable	2026-06-08 04:49:19.062855	Details available The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data. Published: 2006-09-19T18:00:00.000Z Updated: 2024-08-07T19:23:41.469Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1016892 http://secunia.com/advisories/21938 http://securitytracker.com/id?1016893 http://securitytracker.com/id?1016895 http://securitytracker.com/id?1016889	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2147`	vulnerable	2026-06-08 04:48:08.702998	Details available Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service (crash) via malformed e-mail messages (1) without a body or (2) without a carriage return ("\n") separating the headers from the body. Published: 2005-07-01T04:00:00.000Z Updated: 2024-09-17T00:31:19.583Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/82/376487/2004-09-24/2004-09-30/0 http://www.securityfocus.com/bid/11259	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1310`	vulnerable	2026-06-08 04:47:47.302114	Details available The DeviceIoControl function in the Norton Device Driver (NAVAP.sys) in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes (aka "Device Driver Attack"). Published: 2006-11-30T16:00:00.000Z Updated: 2024-08-08T02:19:46.141Z Open on db.gcve.eu Reference links http://www.osvdb.org/4362 https://exchange.xforce.ibmcloud.com/vulnerabilities/12824 http://sec-labs.hack.pl/papers/win32ddc.php http://www.securityfocus.com/bid/8329 http://secunia.com/advisories/9460	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-0994`	vulnerable	2026-06-08 04:47:23.072219	Details available The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain SYSTEM privileges. Published: 2004-09-01T04:00:00.000Z Updated: 2024-08-08T02:12:35.874Z Open on db.gcve.eu Reference links http://www.osvdb.org/3428 http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html http://marc.info/?l=bugtraq&m=107393473928245&w=2 http://lists.grok.org.uk/pipermail/full-disclosure/2004-January/015510.html http://www.secnetops.biz/research/SRT2004-01-09-1022.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.