| Package | Affected versions | Patched versions |
|---|---|---|
| scan engine | ≤ 5.1.4.24 | |
| symantec antivirus clearswift | ≤ 4.3.16.39 | |
| symantec antivirus filtering domino mpe | ≤ 3.0.12 | |
| symantec antivirus messaging | ≤ 4.3.16.39 | |
| symantec antivirus microsoft sharepoint | ≤ 4.3.16.39 | |
| symantec antivirus ms isa | ≤ 4.3.16.39 | |
| symantec antivirus network attached storage | ≤ 4.3.16.39 | |
| symantec antivirus scan engine | ≤ 4.3.16.39 | |
| symantec antivirus scan engine caching | ≤ 4.3.16.39 | |
| symantec mail security exchange | ≤ 4.6.5.12≤ 5.0.4.363 |
Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free