CVE-2002-1775
Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.57%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus (NAV) 2002 allows remote attackers to bypass the initial virus scan and cause NAV to prematurely stop scanning by using a non-RFC compliant MIME header. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is bypassed, but the AutoProtect feature would detect the virus before it is executed
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.57% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- symantec/norton antivirus
- Source
- cve@mitre.org
References
- http://online.securityfocus.com/archive/1/260271
- http://online.securityfocus.com/archive/1/260678
- http://www.securityfocus.com/bid/4243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8390
- http://online.securityfocus.com/archive/1/260271
- http://online.securityfocus.com/archive/1/260678
- http://www.securityfocus.com/bid/4243
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8390
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.