NVD

Id
62130  
Name
CVE-2006-3456  
Description
The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via unspecified vectors related to content on a web site, and place Internet Explorer into a "defunct state" in which remote attackers can execute arbitrary code in addition to other Symantec ActiveX controls, regardless of whether they are marked safe for scripting. NOTE: this CVE was inadvertently used for an E-mail Auto-Protect issue, but that issue has been assigned CVE-2007-3771.  
Reject
 
CVSS Version
2  
CVSS Score
8.5  
Severity
High  
CVSS Base Score
8.5  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2007-05-11  
Modified Date
2012-11-05  
Seq
2006-3456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
321714 62130 CVE-2006-3456 20070509 Symantec Norton Internet Security 2006 COM Object Security ByPass Vulnerability  View
321715 62130 CVE-2006-3456 23822  View
321716 62130 CVE-2006-3456 1018031  View
321717 62130 CVE-2006-3456 http://www.symantec.com/avcenter/security/Content/2007.05.09.html  View
321718 62130 CVE-2006-3456 ADV-2007-1751  View
321719 62130 CVE-2006-3456 symantec-navopts-security-bypass(34200)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56126 JVNDB-2007-004818 Norton AntiVirus などで使用される Symantec NAVOPTS.DLL ActiveX コントロールにおけるコントロールをクラッシュされる脆弱性 Norton AntiVirus、Internet Security、および System Works で使用される Symantec NAVOPTS.DLL ActiveX コントロールは、以下の脆弱性が存在します。 CVE-2006-3456 19558 CVE-2006-3456 62130 8.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004818.html 2007-05-09 2012-12-20 View