Denial of Service Vulnerability in Symantec Products' Decomposer Component
CVE-2007-3699

Currently unrated

Key Information:

Vendor

Symantec
Status
Mail Security
Client Security
Norton Antivirus
Norton Internet Security
Vendor
CVE Published:
5 October 2007

What is CVE-2007-3699?

The Decomposer component in various Symantec products is susceptible to a denial of service condition, triggered when an attacker provides a specially crafted RAR archive file header with a specific value in the PACK_SIZE field. This vulnerability may lead to an infinite loop, causing the affected application to become unresponsive, thereby impacting the availability of services to legitimate users.

References

http://secunia.com/advisories/26053
third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2007/2508
vdb-entryx_refsource_VUPEN
http://osvdb.org/36119
vdb-entryx_refsource_OSVDB

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.