Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Affected Platforms
Symantec Web SecuritySymantec Norton Internet SecuritySymantec Client SecuritySymantec Brightmail AntispamSymantec Norton AntivirusSymantec Mail SecuritySymantec Sav Filter Domino Nt PortsSymantec Gateway SecuritySymantec Sav Filter For Domino NtSymantec Antivirus Scan Engine