Denial of Service Vulnerability in Norton Antivirus by Symantec

CVE-2008-5427

Summary

Norton Antivirus, part of Norton Internet Security version 15.5.0.23, inadequately processes multipart/mixed email messages containing numerous MIME parts. Additionally, it fails to handle e-mails with multiple 'Content-type: message/rfc822;' headers. This vulnerability can be exploited by remote attackers, potentially leading to Denial of Service attacks caused by excessive stack or resource consumption through large and complex email messages.

References