NVD

Id
55176  
Name
CVE-2007-3021  
Description
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-06-05  
Modified Date
2012-10-30  
Seq
2007-3021  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280358 55176 CVE-2007-3021 24313  View
280359 55176 CVE-2007-3021 1018196  View
280360 55176 CVE-2007-3021 http://www.symantec.com/avcenter/security/Content/2007.06.05a.html  View
280361 55176 CVE-2007-3021 ADV-2007-2074  View
280362 55176 CVE-2007-3021 symantec-reporting-code-execution(34744)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56944 JVNDB-2007-005636 Symantec Client Security および SAV CE などで使用される Symantec Reporting Server における任意の実行可能なファイルを作成される脆弱性 Symantec Client Security および Symantec AntiVirus Corporate Edition (SAV CE) などで使用される Symantec Reporting Server は、クリティカル変数を初期化しないため、任意の実行可能なファイルを作成される脆弱性が存在します。 CVE-2007-3021 26376 CVE-2007-3021 55176 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005636.html 2007-06-05 2012-12-20 View