Antivirus Scan Engine

Vendor:

First CVE: Apr 15, 2004 · Active for 22 years

10
Total CVEs
More Total CVEs than 89% of tracked products
2.5
Avg CVEs / Year
Higher CVE frequency than 77% of tracked products
7.2
Avg CVSS
Higher Avg CVSS than 48% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Antivirus Scan Engine over time

Volume of CVEsAvg CVSS Base Score
First CVE
Apr 15, 2004
22 years ago
Most Recent CVE
Oct 5, 2007
6,871 days ago

CVE Severity & Scoring

Antivirus Scan Engine10 CVEs
All CVEs353,173 CVEs
LowMediumHigh
Attack Vector
Local1 (10.0%)
Network0 (0.0%)
Unknown9 (90.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High1 (10.0%)
Unknown9 (90.0%)
User Interaction
None1 (10.0%)
Unknown9 (90.0%)
Required0 (0.0%)
Privileges Required
Low1 (10.0%)
High0 (0.0%)
None0 (0.0%)
Unknown9 (90.0%)

Top CVEs

Signals from CVEs in this product scope (10 CVEs).

10 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privil
Apr 25, 200610.043NOYES
Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers w
Oct 5, 200510.030NONO
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative vi
Feb 8, 20057.527NONO
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR arch
Oct 5, 20079.326NONO
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Oct 5, 20079.325NONO
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-
Apr 25, 20066.419NONO
The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink at
Apr 15, 20047.018NONO
Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, whic
Apr 25, 20065.016NONO
Multiple interpretation error in unspecified versions of Symantec Antivirus allows remote attackers to bypass virus detection via a malicious executable in a specially crafted RAR
Oct 14, 20055.115NONO
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, S
May 2, 20052.612NONO

Exploit Exposure

Signals from CVEs in this product scope (10 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
10.0% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (10 CVEs).

Media Mentions

Signals from CVEs in this product scope (10 CVEs).

Top CNAs Publishing CVEs For Antivirus Scan Engine

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
5.0.129.34.9%00
5.0.0.2437.16.8%01
5.029.34.9%00
4.3.8.2929.34.9%00
4.3.7.2737.13.8%00
4.3.329.34.9%00
4.3.1229.34.9%00
4.349.36.9%00
4.1.829.34.9%00
4.129.34.9%00
4.049.48.7%00