Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:norton_internet_security:2006:*:professional:*:*:*:*:*

part: a version: 2006 update: *

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductNorton Internet Security (d1e65058-63ef-5eea-a9df-a07e59f08bd2)
Editionprofessional
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1428 vulnerable 2026-06-08 04:51:22.963370 Details available
Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."
Published: 2009-04-29T15:00:00.000Z
Updated: 2024-08-07T05:13:25.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3699 vulnerable 2026-06-08 04:49:54.661338 Details available
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T14:28:52.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-0447 vulnerable 2026-06-08 04:49:32.194536 Details available
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Published: 2007-10-05T21:00:00.000Z
Updated: 2024-08-07T12:19:30.204Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4855 vulnerable 2026-06-08 04:49:19.069805 Details available
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Published: 2006-09-19T18:00:00.000Z
Updated: 2024-08-07T19:23:41.469Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.