Denial of Service Vulnerability in Symantec Products' Decomposer Component
CVE-2007-3699

Currently unrated

Key Information:

Vendor: Symantec
Status: Mail Security; Client Security; Norton Antivirus; Norton Internet Security
Vendor: CVE Published:; 5 October 2007

What is CVE-2007-3699?

The Decomposer component in various Symantec products is susceptible to a denial of service condition, triggered when an attacker provides a specially crafted RAR archive file header with a specific value in the PACK_SIZE field. This vulnerability may lead to an infinite loop, causing the affected application to become unresponsive, thereby impacting the availability of services to legitimate users.

References

http://secunia.com/advisories/26053

third-party-advisoryx_refsource_SECUNIA

http://www.vupen.com/english/advisories/2007/2508

vdb-entryx_refsource_VUPEN

http://osvdb.org/36119

vdb-entryx_refsource_OSVDB

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 5, 2007
Vulnerability Reserved
Jul 11, 2007