Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2008-0313

The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.

Published

2008-04-08T17:05:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 6.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

8.6

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec norton_360 1.0 Yes
Application symantec norton_antivirus 2006 Yes
Application symantec norton_antivirus 2007 Yes
Application symantec norton_antivirus 2008 Yes
Application symantec norton_internet_security 2006 Yes
Application symantec norton_internet_security 2007 Yes
Application symantec norton_internet_security 2008 Yes
Application symantec system_works 2006 Yes
Application symantec system_works 2007 Yes
Application symantec system_works 2008 Yes
References