QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-3021

Back to search

CVE-2007-3021

Published: Jun 5, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.

VendorProductVersions

n/a

n/a

affected
n/a

References

24313
vdb-entry
x_refsource_BID
36109
vdb-entry
x_refsource_OSVDB
1018196
vdb-entry
x_refsource_SECTRACK
ADV-2007-2074
vdb-entry
x_refsource_VUPEN
25543
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now