CVE:CVE-2009-1428
CNNVD:CNNVD-200904-538
Symantec Log Viewer中的ccLgView.exe存在多个跨站脚本攻击漏洞。当其在Symantec AntiVirus (SAV) 10.1 MR8之前版本，Symantec Endpoint Protection (SEP) 11.0 MR1之前的11.0版本，Norton 360 1.0版本和Norton Internet Security 2005到2008版本中被使用时，远程攻击者可以借助一个特制的电子邮件信息，注入任意的web脚本或HTML。这些漏洞与"双解析错误"有关。
solution:Upgrade symantec antivirus to a higher version than 10.1,10.0,10.0.1,10.0.1.1,10.0.2,10.0.2.1,10.0.2.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9,and avoid the version (,10.1],10.0,10.0.1,10.0.1.1,10.0.2,10.0.2.1,10.0.2.2,10.0.3,10.0.4,10.0.5,10.0.6,10.0.7,10.0.8,10.0.9; Upgrade symantec endpoint_protection to a higher version than 11.0,and avoid the version 11.0; Upgrade symantec norton_360 to a higher version than 1.0,and avoid the version 1.0; Upgrade symantec norton_internet_security to a higher version than 2005,2005:11.0,2005:11.0.9,2005:11.5.6.14,2005_contains_nav_11.0.0,2006,2007,2008,and avoid the version 2005,2005:11.0,2005:11.0.9,2005:11.5.6.14,2005_contains_nav_11.0.0,2006,2007,2008