CVE:CVE-2008-0312
CNNVD:CNNVD-200804-090
Symantec AutoFix是一些Norton产品中所使用的用于排除Symantec客户端产品中问题的工具。
AutoFix支持工具中所捆绑的ActiveX控件(SYMADATA.DLL)实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。
控件为：
Clsid：3451DEDE-631F-421c-8127-FD793AFC6CC8
  文件：C:\PROGRA~1\COMMON~1\SYMANT~1\SUPPOR~1\SymAData.dll
  Version 2.7.0.1
该控件中存在栈溢出，且没有正确地处理launchProcess()调用。如果用户受骗访问了恶意网页的话，就可能触发这些漏洞，导致执行任意指令。
solution:Upgrade symantec norton_360 to a higher version than 1.0,and avoid the version 1.0; Upgrade symantec norton_antivirus to a higher version than 2006,2007,2008,and avoid the version 2006,2007,2008; Upgrade symantec norton_internet_security to a higher version than 2006,2007,2008,and avoid the version 2006,2007,2008; Upgrade symantec norton_system_works to a higher version than 2006,2007,2008,and avoid the version 2006,2007,2008