From: Secunia Security Advisories (sec-advsecunia.com)
Date: Thu Jul 12 2007 - 17:47:09 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

----------------------------------------------------------------------

Try a new way to discover vulnerabilities that ALREADY EXIST in your
IT infrastructure.

The Full Featured Secunia Network Software Inspector (NSI) is now
available:
http://secunia.com/network_software_inspector/

The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT
vulnerabilities in more than 4,000 different Windows applications.

----------------------------------------------------------------------

TITLE:
Symantec Products CAB and RAR Archive Handling Vulnerabilities

SECUNIA ADVISORY ID:
SA26053

VERIFY ADVISORY:
http://secunia.com/advisories/26053/

CRITICAL:
Highly critical

IMPACT:
DoS, System access

WHERE:
From remote

OPERATING SYSTEM:
Symantec Gateway Security 5400 Series 2.x
http://secunia.com/product/6633/
Symantec Gateway Security 5000 Series 3.x
http://secunia.com/product/6648/

SOFTWARE:
Symantec Web Security 3.x
http://secunia.com/product/2813/
Symantec Scan Engine 5.x
http://secunia.com/product/6651/
Symantec Mail Security for SMTP 5.x
http://secunia.com/product/13591/
Symantec Mail Security for Microsoft Exchange 6.x
http://secunia.com/product/14765/
Symantec Mail Security for Microsoft Exchange 5.x
http://secunia.com/product/6650/
Symantec Mail Security for Exchange 4.x
http://secunia.com/product/2820/
Symantec Mail Security for Domino 5.x
http://secunia.com/product/11179/
Symantec Mail Security for Domino 4.x
http://secunia.com/product/4624/
Symantec Client Security 3.x
http://secunia.com/product/6649/
Symantec Client Security 2.x
http://secunia.com/product/3478/
Symantec Brightmail AntiSpam 6.x
http://secunia.com/product/3656/
Symantec Brightmail AntiSpam 5.x
http://secunia.com/product/4628/
Symantec Brightmail AntiSpam 4.x
http://secunia.com/product/4627/
Symantec AntiVirus/Filtering for Domino 3.x
http://secunia.com/product/2029/
Symantec AntiVirus Scan Engine 4.x
http://secunia.com/product/3040/
Symantec AntiVirus for Network Attached Storage 4.x
http://secunia.com/product/4625/
Symantec AntiVirus for Macintosh 10.x
http://secunia.com/product/14768/
Symantec AntiVirus Corporate Edition for Linux
http://secunia.com/product/14767/
Symantec AntiVirus Corporate Edition 9.x
http://secunia.com/product/3549/
Symantec AntiVirus Corporate Edition 10.x
http://secunia.com/product/5555/
Symantec Norton AntiVirus 2004
http://secunia.com/product/2800/
Symantec Norton AntiVirus 2005
http://secunia.com/product/4009/
Symantec Norton AntiVirus 2006
http://secunia.com/product/6634/
Symantec Norton Internet Security 2004
http://secunia.com/product/2441/
Symantec Norton Internet Security 2004 Professional
http://secunia.com/product/2442/
Symantec Norton Internet Security 2005
http://secunia.com/product/4848/
Symantec Norton Internet Security 2006
http://secunia.com/product/6635/
Symantec Norton SystemWorks 2004
http://secunia.com/product/2796/
Symantec Norton SystemWorks 2005
http://secunia.com/product/4847/
Symantec Norton SystemWorks 2006
http://secunia.com/product/6636/
Symantec Norton Personal Firewall 2006
http://secunia.com/product/6638/
Symantec Norton AntiVirus for Macintosh 9.x
http://secunia.com/product/5948/
Symantec Norton AntiVirus for Macintosh 10.x
http://secunia.com/product/5949/
Symantec Norton Internet Security for Macintosh 3.x
http://secunia.com/product/5951/
Symantec Norton SystemWorks for Macintosh 3.x
http://secunia.com/product/5952/

DESCRIPTION:
Two vulnerabilities have been reported in various Symantec products,
which can be exploited by malicious people to cause a DoS (Denial of
Service) or potentially compromise a vulnerable system.

1) A boundary error within the Symantec Decomposer component when
handling CAB archives can be exploited to execute arbitrary code via
a specially crafted CAB archive.

2) An input validation error within the Symantec Decomposer component
when handling RAR archives can be exploited to cause an infinite
loop.

The vulnerabilities are reported in the following products and
versions:
* Symantec Mail Security 8200 (all builds)
* Symantec Mail Security for Microsoft Exchange versions 4.6.3 and
prior, 5.0.0.204, and 6.0.0 (all builds)
* Symantec Mail Security for Domino NT versions 4.1.4 and prior and
5.0.0.47 (all builds)
* Symantec AntiVirus/Filtering for Domino MPE(AIX, Linux, Solaris)
versions 3.0.12 and prior (all builds)
* Symantec Scan Engine version 5.0.1 and prior (all builds)
* Symantec AntiVirus Scan Engine versions 4.1.8 and prior and 4.3.12
and prior (all builds)
* Symantec AntiVirus Scan Engine for MS ISA versions 4.3.12 and prior
(all builds)
* Symantec AntiVirus Scan Engine for MS Sharepoint versions 4.3.12
and prior (all builds)
* Symantec AntiVirus Scan Engine for Messaging versions 4.3.12 and
prior (all builds)
* Symantec AntiVirus for Network Attached Storage versions 4.3.12 and
prior (all builds)
* Symantec AntiVirus Scan Engine for Clearswift versions 4.3.12 and
prior (all builds)
* Symantec AntiVirus Scan Engine for Caching versions 4.3.12 and
prior (all builds)
* Symantec Client Security versions 3.0, 3.x, and 2.x (all builds)
* Symantec Web Security versions 3.0.1.76 and prior (all builds)
* Symantec Gateway Security 5000 Series version 3.01 (all builds)
* Symantec Gateway Security 5400 Series version 2.0.1 (all builds)
* Symantec Brightmail AntiSpam versions 6.0.x, 5.5, and 4.x (all
builds)
* Symantec AntiVirus Corporate Edition versions 10.1, 10.0, and 9.0
(10.1.5.5000 and prior and 9.0.6.1000 and prior)
* Symantec AntiVirus Corperate Edition for Linux
* Symantec AntiVirus for Macintosh version 10.x (all builds)
* Symantec Web Security for Microsoft ISA 2004 version 5.0 (all
builds)
* Symantec Mail Security for SMTP version 5.0.0
(Windows/Linux/Solaris) and 5.0.1 (all builds)
* Norton AntiVirus 2004/2005/2006
* Norton Internet Security 2004/2005/2005.5 AntiSpyware Edition/2006
* Norton SystemWorks 2004/2005/2006
* Norton Personal Firewall 2006
* Norton AntiVirus for Macintosh versions 9.x and 10.x
* Norton Internet Security for Macintosh version 3.x
* Norton SystemWorks for Macintosh version 3.x

SOLUTION:
Apply updates or run LiveUpdate. Please see the vendor's advisory for
details.

PROVIDED AND/OR DISCOVERED BY:
The vendor credits the Zero Day Initiative.

ORIGINAL ADVISORY:
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]