JVN#C45D8EAD

Norton AntiVirus causes abnormal OS termination when scanning illegal files

Overview

Symantec Norton AntiVirus 2004 and 2005 contain a vulnerability that causes an abnormal operating system termination of a computer, when their real-time scan feature is enabled and examining a file with a specially crafted file header.

Products Affected

• Symantec Norton AntiVirus 2004
• Symantec Norton Internet Security 2004 (Professional)
• Symantec Norton System Works 2004 (Professional)
• Symantec Norton AntiVirus 2005
• Symantec Norton Internet Security 2005
• Symantec Norton System Works 2005 (Premier)

Description

Impact

An attacker could cause an abnormal OS termination by sending a file with a specially crafted file header.

Solution

Vendor Status

References

JPCERT/CC Addendum

Credit

Isamu Noguchi reported this vulnerability to IPA.
JPCERT/CC coordinated with the vendors under Information Security Early Warning Partnership.

Other Information

Update History