Buffer Overflow in Symantec Norton Products via ActiveX Control

CVE-2008-0312

Summary

The stack-based buffer overflow vulnerability resides in the AutoFix Support Tool ActiveX control (version 2.7.0.1) within SYMADATA.DLL for various Symantec Norton products. This flaw enables remote attackers to execute arbitrary code when a specially crafted argument is passed to the vulnerable GetEventLogInfo method. The affected products include multiple versions of Norton Antivirus, Internet Security, and System Works from 2006 through 2008. The exploitation of this vulnerability poses serious security risks, as it can allow unauthorized access and control over the affected systems.

References