CVE:CVE-2005-0249
CNNVD:CNNVD-200502-011
UPX是一款可移植、可扩展的可执行压缩程序。
多款Symantec产品中的DEC2EXE模块存在缓冲区错误漏洞。攻击者可借助UPX压缩文件利用该漏洞执行任意代码。以下产品及版本受到影响：Symantec Norton AntiVirus for Microsoft Exchange 2.18 build 83版本；Symantec Mail Security for Microsoft Exchange 4.01 build 461，4.01 build 459，4.01 build 458，4.5 build 719；Symantec AntiVirus Scan Engine for ISA 4.0.X版本等。
solution:Upgrade symantec antivirus_scan_engine to a higher version than 4.3.3,and avoid the version (,4.3.3); Upgrade symantec brightmail_antispam to a higher version than 4.0,5.5,and avoid the version 4.0,5.5; Upgrade symantec client_security to a higher version than 1.0.1_build_8.01.434:mr3,1.0.1_build_8.01.437,1.0.1_build_8.01.446:mr4,1.0.1_build_8.01.457:mr5,1.0.1_build_8.01.460:mr6,1.0.1_build_8.01.464:mr7,1.0.1_build_8.01.471:mr8,1.1.1_mr1_build_8.1.1.314a,1.1.1_mr2_build_8.1.1.319,1.1.1_mr3_build_8.1.1.323,1.1.1_mr4_build_8.1.1.329,1.1.1_mr5_build_8.1.1.336,and avoid the version 1.0.1_build_8.01.434:mr3,1.0.1_build_8.01.437,1.0.1_build_8.01.446:mr4,1.0.1_build_8.01.457:mr5,1.0.1_build_8.01.460:mr6,1.0.1_build_8.01.464:mr7,1.0.1_build_8.01.471:mr8,1.1.1_mr1_build_8.1.1.314a,1.1.1_mr2_build_8.1.1.319,1.1.1_mr3_build_8.1.1.323,1.1.1_mr4_build_8.1.1.329,1.1.1_mr5_build_8.1.1.336; Upgrade symantec gateway_security to a higher version than 1.0,2.0,2.0.1,and avoid the version 1.0,2.0,2.0.1; Upgrade symantec mail_security to a higher version than 4.0,4.1:build_458,4.1:build_459,4.1:build_461,4.5_build_719,and avoid the version 4.0,4.1:build_458,4.1:build_459,4.1:build_461,4.5_build_719; Upgrade symantec norton_antivirus to a higher version than 2.18_build_83,8.1.1.319,8.1.1.323,8.1.1.329,8.1.1_build8.1.1.314a,8.01.434,8.01.437,8.01.446,8.01.457,8.01.460,8.01.464,8.01.471,9.0,2004,and avoid the version 2.18_build_83,8.1.1.319,8.1.1.323,8.1.1.329,8.1.1_build8.1.1.314a,8.01.434,8.01.437,8.01.446,8.01.457,8.01.460,8.01.464,8.01.471,9.0,2004; Upgrade symantec norton_internet_security to a higher version than 2004,and avoid the version 2004; Upgrade symantec norton_system_works to a higher version than 2004,and avoid the version 2004; Upgrade symantec sav_filter_domino_nt_ports to a higher version than build3.0.5,and avoid the version build3.0.5; Upgrade symantec sav_filter_for_domino_nt to a higher version than 3.1.1,and avoid the version 3.1.1; Upgrade symantec web_security to a higher version than 3.01.59,3.01.60,3.01.61,3.01.62,3.01.63,3.01.67,3.01.68,and avoid the version 3.01.59,3.01.60,3.01.61,3.01.62,3.01.63,3.01.67,3.01.68