CVE-1999-1004 Memory corruption in n/a

What is CVE-1999-1004?

CVE-1999-1004 is a medium-severity memory corruption vulnerability in Symantec Norton Antivirus, published on 13 Oct 2000. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.

Which versions are affected by CVE-1999-1004?

It affects 1 product.

Products include Symantec Norton Antivirus.

How do I fix CVE-1999-1004?

No fix has been published for CVE-1999-1004 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-1999-1004 being exploited?

There is no known exploitation of CVE-1999-1004 in the wild and no public exploit code.

Other vulnerabilities in Symantec Norton Antivirus

• CVE-2005-2017 Privilege escalation in n/a Critical 10.0
• CVE-2004-0487 Other in n/a Critical 10.0
• CVE-2006-3456 Code injection in n/a High 8.5
• CVE-2002-2206 Denial of service in n/a High 7.8
• CVE-2002-1774 Security feature bypass in n/a High 7.5

All Symantec Norton Antivirus vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4gvq-7hq9-g637.