| Package | Affected versions | Patched versions |
|---|---|---|
| scan engine | ≤ 5.1.4.24 | |
| symantec antivirus filtering domino mpe | ≤ 3.0.12 | |
| symantec antivirus network attached storage | ≤ 4.3.16.39 | |
| symantec antivirus scan engine | ≤ 4.3.16.39 | |
| symantec antivirus scan engine caching | ≤ 4.3.16.39 | |
| symantec antivirus scan engine clearswift | ≤ 4.3.16.39 | |
| symantec antivirus scan engine for microsoft sharepoint | ≤ 4.3.16.39 | |
| symantec antivirus scan engine for ms isa | ≤ 4.3.16.39 | |
| symantec antivirus scan engine messaging | ≤ 4.3.16.39 | |
| symantec mail security for microsoft exchange | ≤ 4.6.5.12≤ 5.0.4.363 |
Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free