CVE-2008-0313
- State
- Published
- Severity
- Not scored
- Published
- Apr 8, 2008
- Updated
- Aug 7, 2024
- Reserved
- Jan 16, 2008
Description
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1019753vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.html
- 1019751vdb-entry
- 1019752vdb-entry
- 29660third-party-advisory
- ADV-2008-1077vdb-entry
- 20080402 Symantec Internet Security 2008 ActiveDataInfo.LaunchProcess Design Error Vulnerabilitythird-party-advisory
- symantec-autofixtool-code-execution(41631)vdb-entry
- 28509vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.