← Database

CVE-2005-0249

HIGH CVSS: 7.5 Published: 2005-02-08 Modified: 2026-06-16

Description

Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Affected Platforms

Symantec Web SecuritySymantec Norton Internet SecuritySymantec Client SecuritySymantec Brightmail AntispamSymantec Norton AntivirusSymantec Mail SecuritySymantec Sav Filter Domino Nt PortsSymantec Gateway SecuritySymantec Sav Filter For Domino NtSymantec Antivirus Scan Engine

Weakness Type

NVD-CWE-Other

References