CVE-2005-1346 Denial of service in n/a
Remote attackers can crash Symantec AntiVirus components and bypass detection by sending a crafted RAR file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-1346?
CVE-2005-1346 is a low-severity denial of service vulnerability in Symantec Norton Antivirus, published on 28 Apr 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.
Which versions are affected by CVE-2005-1346?
It affects 7 products.
Products include Symantec Antivirus Scan Engine, Symantec Mail Security, Symantec Norton Antivirus, Symantec Norton Internet Security, Symantec Norton System Works, Symantec Symav Filter Domino Nt and 1 more.
How do I fix CVE-2005-1346?
No fix has been published for CVE-2005-1346 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2005-1346 being exploited?
There is no known exploitation of CVE-2005-1346 in the wild and no public exploit code.
Other vulnerabilities in Symantec Norton Antivirus
Sources
Also known as GHSA-874q-8c44-qwx6.