Signature Detail
Short Name |
HTTP:STC:NORTON:NAV-AX-DOS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
HTTP |
Keywords |
Norton AntiVirus 2004 ActiveX Denial of Service |
Release Date |
2004/06/02 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Norton AntiVirus 2004 ActiveX Denial of Service
This signature detects attempts to exploit a known vulnerability against Symantec's, Norton's AntiVirus Applauncher ActiveX controls. The ActiveX control does not validate external input correctly. Attackers can create a malicious HTML document that, when viewed by a user, activates the ActiveX component and causes a denial of service (DoS) against the user's AntiVirus software. Attackers can crash the target system or execute arbitrary code.
Extended Description
Symantec Norton AntiVirus is prone to a remote code execution vulnerability. This issue presents itself in an ActiveX control used by the application and could allow an attacker to execute arbitrary executables, launch URI pop-up windows, and carry out denial of service attacks against the antivirus application. Norton AntiVirus 2004 is prone to this vulnerability.
Affected Products
- Symantec Norton AntiVirus 2004
References