漏洞标题
N/A
漏洞描述信息
赛门铁克高级威胁保护(ATP)中的病毒分解引擎;赛门铁克数据中心安全:服务器(SDCS:S)6.x到6.6 MP1;赛门铁克Web Gateway;赛门铁克端点保护(SEP)12.1 RU6 MP5之前;赛门铁克Mac端点保护;赛门铁克Linux端点保护(SEP)12.1 RU6 MP5之前;赛门铁克保护引擎(SPE)7.0.5 HF01, 7.5.x之前7.5.3 HF03, 7.5.4之前7.8.0 HF01;赛门铁克 SharePoint服务器(SPSS)6.0.3到6.0.5之前6.0.5 HF 1.5和6.0.6之前 HF 1.6;赛门铁克 Microsoft Exchange(SMSMSE)邮件安全7.0_3966002 HF1.1和7.5.x之前7.5_3966008 VHF1.2;赛门铁克Domino(SMSDOM)邮件安全8.0.9 HF1.1和8.1.x之前8.1.3 HF1.2;CSAPI之前10.0.4 HF01;赛门铁克消息 gateway(SMG)10.6.1-4;赛门铁克服务提供商消息 gateway(SMG-SP)10.5之前254和10.6之前253;诺顿病毒防护、诺顿安全、诺顿互联网安全和诺顿360之前NGC 22.7;诺顿Mac端点保护之前13.0.2;诺顿 Power Eraser(NPE)之前5.1;诺顿启动移除工具(NBRT)2016.1之前允许远程攻击者通过邮件中修改的MIME数据执行任意代码或造成拒绝服务(内存 corruption)。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via modified MIME data in a message.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
多款Symantec和Norton产品内存损坏漏洞
漏洞描述信息
Symantec Advanced Threat Protection(ATP)、Symantec Embedded Security:Critical System Protection(SES:CSP)和Symantec Data Center Security: Server Advanced(SDCS:SA)都是美国赛门铁克(Symantec)公司的安全产品。ATP是一套用于挖掘并清除终端、网络和电子邮件网关等存在的高级威胁的软件;SES:CSP是一款轻量级的入侵检测和防御系统客户端产品;SDCS
CVSS信息
N/A
漏洞类别
输入验证错误