ActiveX Control Vulnerability in Norton AntiVirus by Symantec

CVE-2006-3456

Summary

The Symantec NAVOPTS.DLL ActiveX control, used in various Norton AntiVirus and Internet Security products, contains a vulnerability that can be exploited by remote attackers. This exploit allows them to crash the control via specific web content, resulting in Internet Explorer entering a non-responsive state. In this state, attackers may execute arbitrary code, impacting security even for other ActiveX controls that are typically deemed safe. This vulnerability emphasizes the critical need for users to apply updates and utilize protective measures while interacting with potentially compromised web environments.

References