Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:web_security:2.5:*:*:*:*:*:*:*

part: a version: 2.5 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductWeb Security (ceaf36f6-df5f-5150-93cd-8818e5b4cd3d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.666667 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.200795 Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2755 vulnerable 2026-06-08 04:48:10.781378 Details available
Cross-site scripting (XSS) vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in (1) error or (2) block page messages.
Published: 2007-11-15T23:00:00.000Z
Updated: 2024-08-08T01:36:25.302Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.