Description
The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
References
- 9915 vdb-entry
- 20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b mailing-list
- http://www.nextgenss.com/advisories/nisrce.txt
- 11168 third-party-advisory
- 20040319 Norton Internet Security Remote Command Execution (#NISR19042004b) mailing-list
- VU#549054 third-party-advisory
- norton-is-launchurl-command-execution(15538) vdb-entry
- http://www.sarc.com/avcenter/security/Content/2004.03.19.html