Description
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."
References
- 62412 vdb-entry
- 20100224 VUPEN Security Research - Symantec Products "SYMLTCOM.dll" Buffer Overflow Vulnerability mailing-list
- 1023630 vdb-entry
- 38654 third-party-advisory
- symantec-symltcom-activex-bo(56357) vdb-entry
- ADV-2010-0411 vdb-entry
- 1023631 vdb-entry
- 38217 vdb-entry
- 1023628 vdb-entry
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01
- 1023629 vdb-entry