CVE:CVE-2007-2955
CNNVD:CNNVD-200708-151
Symantec Norton AntiVirus是一款功能强大的反病毒程序。
Norton产品的NavComUI.dll库所提供的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞控制用户系统。
NavComUI.dll库所提供的AxSysListView32和AxSysListView32OAA ActiveX控件在处理AnomalyList和Anomaly属性时将VARIANT*用作了参数，如果用户受骗访问了恶意网页的话就可能导致浏览器崩溃或执行任意代码。
solution:Upgrade symantec norton_antivirus to a higher version than 2006,and avoid the version 2006; Upgrade symantec norton_internet_security to a higher version than 2005,2006,and avoid the version 2005,2006; Upgrade symantec norton_system_works to a higher version than 2006,and avoid the version 2006