Vulnerability Bulletins |
Desbordamiento de pila en Symantec Client Security Internet E-mail |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Denegación de Servicio |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Symantec AntiVirus Corporate Edition 9.x Symantec AntiVirus Corporate Edition 10.0 Symantec Client Security 2.0.x Symantec Client Security 3.0.x |
Description |
|
|
Se ha encontrado una vulnerabilidad del tipo desbordamiento de pila en Symantec Client Security Internet E-mail. La vulnerabilidad reside cuando Internet E-mail Auto-Protect esta activado y un mensaje saliente contiene más de 951 caracteres en los campos To, From, o Subject. Un atacante local podría causar una denegación de servicio. |
|
Solution |
|
|
Actualización de software Symantec Symantec AntiVirus Corporate Edition 9.x / patch SAV 9 MR6 (SAV 9.0.6.1000) Symantec AntiVirus Corporate Edition 10.0 / Upgrade 10.1 Symantec Client Security 2.0.x / patch Symantec Client Security 2.0.6 MR6 (build 1000-31) Symantec Client Security 3.0.x / Upgrade SCS 3.1 https://fileconnect.symantec.com/ |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | 24802 |
Other resources |
|
|
Symantec Security Advisory (SYM07-016) http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11b.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-07-13 |