Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Antivirus_scan_engine | Symantec | 4.3.7.27 (including) | 4.3.7.27 (including) |
| Mail_security | Symantec | 4.0.5.66 (including) | 4.0.5.66 (including) |
| Mail_security | Symantec | 4.5.4.743 (including) | 4.5.4.743 (including) |
| Norton_antivirus | Symantec | 2005_11.0.0 (including) | 2005_11.0.0 (including) |
| Norton_internet_security | Symantec | 2005_contains_nav_11.0.0 (including) | 2005_contains_nav_11.0.0 (including) |
| Norton_system_works | Symantec | 2005_contains_nav_11.0.0 (including) | 2005_contains_nav_11.0.0 (including) |
| Symav_filter_domino_nt | Symantec | 3.1.1.87 (including) | 3.1.1.87 (including) |
| Web_security | Symantec | 3.0.1.72 (including) | 3.0.1.72 (including) |