CVE:CVE-2007-0447
CNNVD:CNNVD-200710-097
Symantec AntiVirus是非常流行的杀毒解决方案。
Symantec AntiVirus引擎在扫描多个恶意格式的CAB文档时还存在堆溢出漏洞，如果用户受骗打开了特制的CAB文件的话就可能导致执行任意指令。
solution:Upgrade symantec antivirus_scan_engine to a higher version than 4.0,4.1,4.1.8,4.3,4.3.3,4.3.7.27,4.3.8.29,4.3.12,5.0,5.0.1,and avoid the version 4.0,4.1,4.1.8,4.3,4.3.3,4.3.7.27,4.3.8.29,4.3.12,5.0,5.0.1; Upgrade symantec brightmail_antispam to a higher version than 4.0,5.5,6.0,6.0.1,6.0.2,6.0.3,6.0.4,and avoid the version 4.0,5.5,6.0,6.0.1,6.0.2,6.0.3,6.0.4; Upgrade symantec client_security to a higher version than 2.0,2.0:build_9.0.0.338,2.0.1_build_9.0.1.1000:mr1,2.0.2_build_9.0.2.1000:mr2,2.0.3_build_9.0.3.1000:mr3,2.0.4,2.0.4:mr4_build1000,2.0.5_build_1100_mp1:mr5,2.0.6:mr6,3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.394,3.1.396,3.1.400,3.1.401,and avoid the version 2.0,2.0:build_9.0.0.338,2.0.1_build_9.0.1.1000:mr1,2.0.2_build_9.0.2.1000:mr2,2.0.3_build_9.0.3.1000:mr3,2.0.4,2.0.4:mr4_build1000,2.0.5_build_1100_mp1:mr5,2.0.6:mr6,3.0,3.0.0.359,3.0.1.1000,3.0.1.1001,3.0.1.1007,3.0.1.1008,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2010,3.0.2.2011,3.0.2.2020,3.0.2.2021,3.1,3.1.394,3.1.396,3.1.400,3.1.401; Upgrade symantec mail_security to a higher version than 4.0,4.0:build456,4.0:build463,4.0:build465,4.0:build736,4.0:build741,4.0:build743,4.0.1,4.1:build458,4.1:build459,4.1:build461,4.5,4.5.4.743,4.5_build_719,4.5_build_736,4.5_build_741,4.6.1.107,4.6.3,4.6_build_97,5.0,5.0.0.204,5.0.1,5.1.0,6.0.0,and avoid the version 4.0,4.0:build456,4.0:build463,4.0:build465,4.0:build736,4.0:build741,4.0:build743,4.0.1,4.1:build458,4.1:build459,4.1:build461,4.5,4.5.4.743,4.5_build_719,4.5_build_736,4.5_build_741,4.6.1.107,4.6.3,4.6_build_97,5.0,5.0.0.204,5.0.1,5.1.0,6.0.0; Upgrade symantec norton_antivirus to a higher version than *,9.0,9.0.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.2,9.0.2.1000,9.0.3,9.0.3.1000,9.0.4,9.0.4:mr4_build_1000,9.0.5,9.0.5.1100,9.0.6.1000,10.0,10.0.0,10.0.0.359,10.0.1,10.0.1.1000,10.0.1.1007,10.0.1.1008,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,10.1.4,10.1.4:mr4_mp1_build4010,10.1.4.4010,10.1.394,10.1.396,10.1.400,10.1.401,10.9.1,2004,2005,2005:11.0,2005:11.0.9,2006,and avoid the version 9.0,9.0.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.2,9.0.2.1000,9.0.3,9.0.3.1000,9.0.4,9.0.4:mr4_build_1000,9.0.5,9.0.5.1100,9.0.6.1000,10.0,10.0.0,10.0.0.359,10.0.1,10.0.1.1000,10.0.1.1007,10.0.1.1008,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,10.1,10.1.4,10.1.4:mr4_mp1_build4010,10.1.4.4010,10.1.394,10.1.396,10.1.400,10.1.401,10.9.1,2004,2005,2005:11.0,2005:11.0.9,2006; Upgrade symantec norton_internet_security to a higher version than 3.0,2004,2005,2005:11.0,2005:11.0.9,2005:11.5.6.14,2006,and avoid the version 3.0,2004,2005,2005:11.0,2005:11.0.9,2005:11.5.6.14,2006; Upgrade symantec norton_personal_firewall to a higher version than 2006,2006_9.1.0.33,2006_9.1.1.7,and avoid the version 2006,2006_9.1.0.33,2006_9.1.1.7; Upgrade symantec norton_system_works to a higher version than 3.0,2004,2005,2005:11.0,2005:11.0.9,2006,and avoid the version 3.0,2004,2005,2005:11.0,2005:11.0.9,2006; Upgrade symantec symantec_antivirus_filtering_+for_domino to a higher version than 3.0.12,and avoid the version 3.0.12; Upgrade symantec web_security to a higher version than 2.5,3.0,3.0.1,3.0.1.70,3.0.1.76,3.0.1_build_3.01.70,3.0.1_build_3.01.72,3.0.1_build_3.01.74,3.01.59,3.01.60,3.01.61,3.01.62,3.01.63,3.01.67,3.01.68,5.0,and avoid the version 2.5,3.0,3.0.1,3.0.1.70,3.0.1.76,3.0.1_build_3.01.70,3.0.1_build_3.01.72,3.0.1_build_3.01.74,3.01.59,3.01.60,3.01.61,3.01.62,3.01.63,3.01.67,3.01.68,5.0; Upgrade symantec gateway_security_5000_series to a higher version than 3.0.1,and avoid the version 3.0.1; Upgrade symantec gateway_security_5400 to a higher version than 2.0.1,and avoid the version 2.0.1; Upgrade symantec mail_security_8820_appliance to a higher version than *