Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:norton_antivirus:10.0:*:macintosh:*:*:*:*:*

part: a version: 10.0 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductNorton Antivirus (122a4eba-755b-5ae1-9776-f31bcb6ba06a)
Editionmacintosh
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5829 vulnerable 2026-06-08 04:50:07.151203 Details available
The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet Security for Macintosh 3.x, uses a directory with weak permissions (group writable), which allows local admin users to gain root privileges by replacing unspecified files, which are executed when a user with physical access inserts a disk and the "Show Progress During Mount Scans" option is enabled.
Published: 2007-11-05T19:00:00.000Z
Updated: 2024-08-07T15:47:00.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.642373 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.172875 Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1836 vulnerable 2026-06-08 04:48:58.186408 Details available
Untrusted search path vulnerability in unspecified components in Symantec LiveUpdate for Macintosh 3.0.0 through 3.5.0 do not set the execution path, which allows local users to gain privileges via a Trojan horse program.
Published: 2006-04-19T16:00:00.000Z
Updated: 2024-08-07T17:27:29.470Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.