CVE

Id
26378  
CVE No.
CVE-2007-3021  
Status
Candidate  
Description
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.  
Phase
Assigned (20070604)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267134 26378 CVE-2007-3021 CONFIRM:http://www.symantec.com/avcenter/security/Content/2007.06.05a.html  View
267135 26378 CVE-2007-3021 BID:24313  View
267136 26378 CVE-2007-3021 URL:http://www.securityfocus.com/bid/24313  View
267137 26378 CVE-2007-3021 OSVDB:36109  View
267138 26378 CVE-2007-3021 URL:http://osvdb.org/36109  View
267139 26378 CVE-2007-3021 VUPEN:ADV-2007-2074  View
267140 26378 CVE-2007-3021 URL:http://www.vupen.com/english/advisories/2007/2074  View
267141 26378 CVE-2007-3021 SECTRACK:1018196  View
267142 26378 CVE-2007-3021 URL:http://www.securitytracker.com/id?1018196  View
267143 26378 CVE-2007-3021 SECUNIA:25543  View
267144 26378 CVE-2007-3021 URL:http://secunia.com/advisories/25543  View
267145 26378 CVE-2007-3021 XF:symantec-reporting-code-execution(34744)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53443 JVNDB-2007-002135 ClamAV の unsp.c における詳細不明な脆弱性 ClamAV の unsp.c は、適切に特定バッファの終端を計算しないため、詳細不明な脆弱性が存在します。 CVE-2007-3023 26378 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002135.html  View