The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Antivirus_scan_engine | Symantec | 4.0 (including) | 4.0 (including) |
| Antivirus_scan_engine | Symantec | 4.1 (including) | 4.1 (including) |
| Antivirus_scan_engine | Symantec | 4.1.8 (including) | 4.1.8 (including) |
| Antivirus_scan_engine | Symantec | 4.3 (including) | 4.3 (including) |
| Antivirus_scan_engine | Symantec | 4.3.3 (including) | 4.3.3 (including) |
| Antivirus_scan_engine | Symantec | 4.3.7.27 (including) | 4.3.7.27 (including) |
| Antivirus_scan_engine | Symantec | 4.3.8.29 (including) | 4.3.8.29 (including) |
| Antivirus_scan_engine | Symantec | 4.3.12 (including) | 4.3.12 (including) |
| Antivirus_scan_engine | Symantec | 5.0 (including) | 5.0 (including) |
| Antivirus_scan_engine | Symantec | 5.0.1 (including) | 5.0.1 (including) |
| Brightmail_antispam | Symantec | 4.0 (including) | 4.0 (including) |
| Brightmail_antispam | Symantec | 5.5 (including) | 5.5 (including) |
| Brightmail_antispam | Symantec | 6.0 (including) | 6.0 (including) |
| Brightmail_antispam | Symantec | 6.0.1 (including) | 6.0.1 (including) |
| Brightmail_antispam | Symantec | 6.0.2 (including) | 6.0.2 (including) |
| Brightmail_antispam | Symantec | 6.0.3 (including) | 6.0.3 (including) |
| Brightmail_antispam | Symantec | 6.0.4 (including) | 6.0.4 (including) |
| Client_security | Symantec | 2.0 (including) | 2.0 (including) |
| Client_security | Symantec | 2.0-build_9.0.0.338 (including) | 2.0-build_9.0.0.338 (including) |
| Client_security | Symantec | 2.0.1_build_9.0.1.1000-mr1 (including) | 2.0.1_build_9.0.1.1000-mr1 (including) |
| Client_security | Symantec | 2.0.2_build_9.0.2.1000-mr2 (including) | 2.0.2_build_9.0.2.1000-mr2 (including) |
| Client_security | Symantec | 2.0.3_build_9.0.3.1000-mr3 (including) | 2.0.3_build_9.0.3.1000-mr3 (including) |
| Client_security | Symantec | 2.0.4 (including) | 2.0.4 (including) |
| Client_security | Symantec | 2.0.4-mr4_build1000 (including) | 2.0.4-mr4_build1000 (including) |
| Client_security | Symantec | 2.0.5_build_1100_mp1-mr5 (including) | 2.0.5_build_1100_mp1-mr5 (including) |
| Client_security | Symantec | 2.0.6-mr6 (including) | 2.0.6-mr6 (including) |
| Client_security | Symantec | 3.0 (including) | 3.0 (including) |
| Client_security | Symantec | 3.0.0.359 (including) | 3.0.0.359 (including) |
| Client_security | Symantec | 3.0.1.1000 (including) | 3.0.1.1000 (including) |
| Client_security | Symantec | 3.0.1.1001 (including) | 3.0.1.1001 (including) |
| Client_security | Symantec | 3.0.1.1007 (including) | 3.0.1.1007 (including) |
| Client_security | Symantec | 3.0.1.1008 (including) | 3.0.1.1008 (including) |
| Client_security | Symantec | 3.0.2.2000 (including) | 3.0.2.2000 (including) |
| Client_security | Symantec | 3.0.2.2001 (including) | 3.0.2.2001 (including) |
| Client_security | Symantec | 3.0.2.2002 (including) | 3.0.2.2002 (including) |
| Client_security | Symantec | 3.0.2.2010 (including) | 3.0.2.2010 (including) |
| Client_security | Symantec | 3.0.2.2011 (including) | 3.0.2.2011 (including) |
| Client_security | Symantec | 3.0.2.2020 (including) | 3.0.2.2020 (including) |
| Client_security | Symantec | 3.0.2.2021 (including) | 3.0.2.2021 (including) |
| Client_security | Symantec | 3.1 (including) | 3.1 (including) |
| Client_security | Symantec | 3.1.394 (including) | 3.1.394 (including) |
| Client_security | Symantec | 3.1.396 (including) | 3.1.396 (including) |
| Client_security | Symantec | 3.1.400 (including) | 3.1.400 (including) |
| Client_security | Symantec | 3.1.401 (including) | 3.1.401 (including) |
| Mail_security | Symantec | 4.0 (including) | 4.0 (including) |
| Mail_security | Symantec | 4.0-build456 (including) | 4.0-build456 (including) |
| Mail_security | Symantec | 4.0-build463 (including) | 4.0-build463 (including) |
| Mail_security | Symantec | 4.0-build465 (including) | 4.0-build465 (including) |
| Mail_security | Symantec | 4.0-build736 (including) | 4.0-build736 (including) |
| Mail_security | Symantec | 4.0-build741 (including) | 4.0-build741 (including) |
| Mail_security | Symantec | 4.0-build743 (including) | 4.0-build743 (including) |
| Mail_security | Symantec | 4.0.1 (including) | 4.0.1 (including) |
| Mail_security | Symantec | 4.1-build458 (including) | 4.1-build458 (including) |
| Mail_security | Symantec | 4.1-build459 (including) | 4.1-build459 (including) |
| Mail_security | Symantec | 4.1-build461 (including) | 4.1-build461 (including) |
| Mail_security | Symantec | 4.5 (including) | 4.5 (including) |
| Mail_security | Symantec | 4.5.4.743 (including) | 4.5.4.743 (including) |
| Mail_security | Symantec | 4.5_build_719 (including) | 4.5_build_719 (including) |
| Mail_security | Symantec | 4.5_build_736 (including) | 4.5_build_736 (including) |
| Mail_security | Symantec | 4.5_build_741 (including) | 4.5_build_741 (including) |
| Mail_security | Symantec | 4.6.1.107 (including) | 4.6.1.107 (including) |
| Mail_security | Symantec | 4.6.3 (including) | 4.6.3 (including) |
| Mail_security | Symantec | 4.6_build_97 (including) | 4.6_build_97 (including) |
| Mail_security | Symantec | 5.0 (including) | 5.0 (including) |
| Mail_security | Symantec | 5.0.0.204 (including) | 5.0.0.204 (including) |
| Mail_security | Symantec | 5.0.1 (including) | 5.0.1 (including) |
| Mail_security | Symantec | 5.1.0 (including) | 5.1.0 (including) |
| Mail_security | Symantec | 6.0.0 (including) | 6.0.0 (including) |
| Norton_antivirus | Symantec | * | * |
| Norton_antivirus | Symantec | 9.0 (including) | 9.0 (including) |
| Norton_antivirus | Symantec | 9.0.0 (including) | 9.0.0 (including) |
| Norton_antivirus | Symantec | 9.0.0.338 (including) | 9.0.0.338 (including) |
| Norton_antivirus | Symantec | 9.0.1 (including) | 9.0.1 (including) |
| Norton_antivirus | Symantec | 9.0.1.1.1000 (including) | 9.0.1.1.1000 (including) |
| Norton_antivirus | Symantec | 9.0.2 (including) | 9.0.2 (including) |
| Norton_antivirus | Symantec | 9.0.2.1000 (including) | 9.0.2.1000 (including) |
| Norton_antivirus | Symantec | 9.0.3 (including) | 9.0.3 (including) |
| Norton_antivirus | Symantec | 9.0.3.1000 (including) | 9.0.3.1000 (including) |
| Norton_antivirus | Symantec | 9.0.4 (including) | 9.0.4 (including) |
| Norton_antivirus | Symantec | 9.0.4-mr4_build_1000 (including) | 9.0.4-mr4_build_1000 (including) |
| Norton_antivirus | Symantec | 9.0.5 (including) | 9.0.5 (including) |
| Norton_antivirus | Symantec | 9.0.5.1100 (including) | 9.0.5.1100 (including) |
| Norton_antivirus | Symantec | 9.0.6.1000 (including) | 9.0.6.1000 (including) |
| Norton_antivirus | Symantec | 10.0 (including) | 10.0 (including) |
| Norton_antivirus | Symantec | 10.0.0 (including) | 10.0.0 (including) |
| Norton_antivirus | Symantec | 10.0.0.359 (including) | 10.0.0.359 (including) |
| Norton_antivirus | Symantec | 10.0.1 (including) | 10.0.1 (including) |
| Norton_antivirus | Symantec | 10.0.1.1000 (including) | 10.0.1.1000 (including) |
| Norton_antivirus | Symantec | 10.0.1.1007 (including) | 10.0.1.1007 (including) |
| Norton_antivirus | Symantec | 10.0.1.1008 (including) | 10.0.1.1008 (including) |
| Norton_antivirus | Symantec | 10.0.2.2000 (including) | 10.0.2.2000 (including) |
| Norton_antivirus | Symantec | 10.0.2.2001 (including) | 10.0.2.2001 (including) |
| Norton_antivirus | Symantec | 10.0.2.2002 (including) | 10.0.2.2002 (including) |
| Norton_antivirus | Symantec | 10.0.2.2010 (including) | 10.0.2.2010 (including) |
| Norton_antivirus | Symantec | 10.0.2.2011 (including) | 10.0.2.2011 (including) |
| Norton_antivirus | Symantec | 10.0.2.2020 (including) | 10.0.2.2020 (including) |
| Norton_antivirus | Symantec | 10.0.2.2021 (including) | 10.0.2.2021 (including) |
| Norton_antivirus | Symantec | 10.1 (including) | 10.1 (including) |
| Norton_antivirus | Symantec | 10.1.4 (including) | 10.1.4 (including) |
| Norton_antivirus | Symantec | 10.1.4-mr4_mp1_build4010 (including) | 10.1.4-mr4_mp1_build4010 (including) |
| Norton_antivirus | Symantec | 10.1.4.4010 (including) | 10.1.4.4010 (including) |
| Norton_antivirus | Symantec | 10.1.394 (including) | 10.1.394 (including) |
| Norton_antivirus | Symantec | 10.1.396 (including) | 10.1.396 (including) |
| Norton_antivirus | Symantec | 10.1.400 (including) | 10.1.400 (including) |
| Norton_antivirus | Symantec | 10.1.401 (including) | 10.1.401 (including) |
| Norton_antivirus | Symantec | 10.9.1 (including) | 10.9.1 (including) |
| Norton_antivirus | Symantec | 2004 (including) | 2004 (including) |
| Norton_antivirus | Symantec | 2005 (including) | 2005 (including) |
| Norton_antivirus | Symantec | 2005-11.0 (including) | 2005-11.0 (including) |
| Norton_antivirus | Symantec | 2005-11.0.9 (including) | 2005-11.0.9 (including) |
| Norton_antivirus | Symantec | 2006 (including) | 2006 (including) |
| Norton_internet_security | Symantec | 3.0 (including) | 3.0 (including) |
| Norton_internet_security | Symantec | 2004 (including) | 2004 (including) |
| Norton_internet_security | Symantec | 2005 (including) | 2005 (including) |
| Norton_internet_security | Symantec | 2005-11.0 (including) | 2005-11.0 (including) |
| Norton_internet_security | Symantec | 2005-11.0.9 (including) | 2005-11.0.9 (including) |
| Norton_internet_security | Symantec | 2005-11.5.6.14 (including) | 2005-11.5.6.14 (including) |
| Norton_internet_security | Symantec | 2006 (including) | 2006 (including) |
| Norton_personal_firewall | Symantec | 2006 (including) | 2006 (including) |
| Norton_personal_firewall | Symantec | 2006_9.1.0.33 (including) | 2006_9.1.0.33 (including) |
| Norton_personal_firewall | Symantec | 2006_9.1.1.7 (including) | 2006_9.1.1.7 (including) |
| Norton_system_works | Symantec | 3.0 (including) | 3.0 (including) |
| Norton_system_works | Symantec | 2004 (including) | 2004 (including) |
| Norton_system_works | Symantec | 2005 (including) | 2005 (including) |
| Norton_system_works | Symantec | 2005-11.0 (including) | 2005-11.0 (including) |
| Norton_system_works | Symantec | 2005-11.0.9 (including) | 2005-11.0.9 (including) |
| Norton_system_works | Symantec | 2006 (including) | 2006 (including) |
| Symantec_antivirus_filtering_+for_domino | Symantec | 3.0.12 (including) | 3.0.12 (including) |
| Web_security | Symantec | 2.5 (including) | 2.5 (including) |
| Web_security | Symantec | 3.0 (including) | 3.0 (including) |
| Web_security | Symantec | 3.0.1 (including) | 3.0.1 (including) |
| Web_security | Symantec | 3.0.1.70 (including) | 3.0.1.70 (including) |
| Web_security | Symantec | 3.0.1.76 (including) | 3.0.1.76 (including) |
| Web_security | Symantec | 3.0.1_build_3.01.70 (including) | 3.0.1_build_3.01.70 (including) |
| Web_security | Symantec | 3.0.1_build_3.01.72 (including) | 3.0.1_build_3.01.72 (including) |
| Web_security | Symantec | 3.0.1_build_3.01.74 (including) | 3.0.1_build_3.01.74 (including) |
| Web_security | Symantec | 3.01.59 (including) | 3.01.59 (including) |
| Web_security | Symantec | 3.01.60 (including) | 3.01.60 (including) |
| Web_security | Symantec | 3.01.61 (including) | 3.01.61 (including) |
| Web_security | Symantec | 3.01.62 (including) | 3.01.62 (including) |
| Web_security | Symantec | 3.01.63 (including) | 3.01.63 (including) |
| Web_security | Symantec | 3.01.67 (including) | 3.01.67 (including) |
| Web_security | Symantec | 3.01.68 (including) | 3.01.68 (including) |
| Web_security | Symantec | 5.0 (including) | 5.0 (including) |
References
- http://osvdb.org/36119
- http://secunia.com/advisories/26053
- http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
- http://www.securityfocus.com/bid/24282
- http://www.vupen.com/english/advisories/2007/2508
- http://www.zerodayinitiative.com/advisories/ZDI-07-039.html
- http://osvdb.org/36119
- http://secunia.com/advisories/26053
- http://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
- http://www.securityfocus.com/bid/24282
- http://www.vupen.com/english/advisories/2007/2508
- http://www.zerodayinitiative.com/advisories/ZDI-07-039.html