Signature Detail

HTTP: Symantec NAVOPTS.DLL ActiveX Control

This signature detects attempts to exploit a known vulnerability in Norton Antivirus and Norton SystemWorks. Attackers can create Web pages containing dangerous ActiveX controls, which if accessed by a victim, can allow the attacker to gain control of the client system.

Extended Description

Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of the user visiting a malicious web page. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

• Symantec norton_antivirus_2005
• Symantec norton_antivirus_2006
• Symantec norton_internet_security_2005
• Symantec norton_internet_security_2006
• Symantec norton_systemworks_2005
• Symantec norton_systemworks_2006

References

• BugTraq: 23822
• CVE: CVE-2006-3456
• URL: https://alerts.symantec.com/loaddocument.aspx?GUID=249769c9-c7f3-4a5e-b8cb-dab6c9980970