CVE-2007-3699

Description

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.

Affected products

• Symantec / antivirus_scan_engine4.3.3 – 4.3.3
• Symantec / antivirus_scan_engine4.3.8.29 – 4.3.8.29
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine4.3.12 – 4.3.12
• Symantec / antivirus_scan_engine5.0 – 5.0
• Symantec / antivirus_scan_engine5.0.1 – 5.0.1
• Symantec / antivirus_scan_engine4.0 – 4.0
• Symantec / antivirus_scan_engine4.3 – 4.3
• Symantec / antivirus_scan_engine4.3 – 4.3
• Symantec / antivirus_scan_engine4.3 – 4.3
• Symantec / antivirus_scan_engine4.3 – 4.3
• Symantec / antivirus_scan_engine4.3 – 4.3
• Symantec / antivirus_scan_engine4.3.7.27 – 4.3.7.27
• Symantec / antivirus_scan_engine4.0 – 4.0
• Symantec / antivirus_scan_engine4.1.8 – 4.1.8
• Symantec / antivirus_scan_engine4.1 – 4.1
• Symantec / brightmail_antispam4.0 – 4.0
• Symantec / brightmail_antispam5.5 – 5.5
• Symantec / brightmail_antispam6.0 – 6.0
• Symantec / brightmail_antispam6.0.3 – 6.0.3
• Symantec / brightmail_antispam6.0.1 – 6.0.1
• Symantec / brightmail_antispam6.0.2 – 6.0.2
• Symantec / brightmail_antispam6.0.4 – 6.0.4
• Symantec / client_security3.1.401 – 3.1.401
• Symantec / client_security3.1.396 – 3.1.396
• Symantec / client_security2.0 – 2.0
• Symantec / client_security2.0 – 2.0
• Symantec / client_security2.0 – 2.0
• Symantec / client_security2.0.1_build_9.0.1.1000 – 2.0.1_build_9.0.1.1000
• Symantec / client_security2.0.2_build_9.0.2.1000 – 2.0.2_build_9.0.2.1000
• Symantec / client_security2.0.3_build_9.0.3.1000 – 2.0.3_build_9.0.3.1000
• Symantec / client_security2.0.4 – 2.0.4
• Symantec / client_security2.0.4 – 2.0.4
• Symantec / client_security2.0.5_build_1100_mp1 – 2.0.5_build_1100_mp1
• Symantec / client_security2.0.6 – 2.0.6
• Symantec / client_security3.0 – 3.0
• Symantec / client_security3.0.0.359 – 3.0.0.359
• Symantec / client_security3.0.1.1000 – 3.0.1.1000
• Symantec / client_security3.0.1.1001 – 3.0.1.1001
• Symantec / client_security3.0.1.1007 – 3.0.1.1007
• Symantec / client_security3.0.1.1008 – 3.0.1.1008
• Symantec / client_security3.0.2.2000 – 3.0.2.2000
• Symantec / client_security3.0.2.2001 – 3.0.2.2001
• Symantec / client_security3.0.2.2002 – 3.0.2.2002
• Symantec / client_security3.0.2.2010 – 3.0.2.2010
• Symantec / client_security3.0.2.2011 – 3.0.2.2011
• Symantec / client_security3.0.2.2020 – 3.0.2.2020
• Symantec / client_security3.0.2.2021 – 3.0.2.2021
• Symantec / client_security3.1 – 3.1
• Symantec / client_security3.1.394 – 3.1.394
• Symantec / client_security3.1.400 – 3.1.400
• Symantec / gateway_security_5000_series3.0.1 – 3.0.1
• Symantec / gateway_security_54002.0.1 – 2.0.1
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0.1 – 4.0.1
• Symantec / mail_security4.1 – 4.1
• Symantec / mail_security4.1 – 4.1
• Symantec / mail_security4.1 – 4.1
• Symantec / mail_security4.5 – 4.5
• Symantec / mail_security4.5.4.743 – 4.5.4.743
• Symantec / mail_security4.5_build_719 – 4.5_build_719
• Symantec / mail_security4.5_build_736 – 4.5_build_736
• Symantec / mail_security4.5_build_741 – 4.5_build_741
• Symantec / mail_security4.6.1.107 – 4.6.1.107
• Symantec / mail_security4.6.3 – 4.6.3
• Symantec / mail_security4.6_build_97 – 4.6_build_97
• Symantec / mail_security5.0 – 5.0
• Symantec / mail_security5.0 – 5.0
• Symantec / mail_security5.0.0.204 – 5.0.0.204
• Symantec / mail_security5.0.1 – 5.0.1
• Symantec / mail_security5.1.0 – 5.1.0
• Symantec / mail_security6.0.0 – 6.0.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security4.0 – 4.0
• Symantec / mail_security_8820_appliance
• Symantec / norton_antivirus2005 – 2005
• Symantec / norton_antivirus
• Symantec / norton_antivirus9.0 – 9.0
• Symantec / norton_antivirus9.0 – 9.0
• Symantec / norton_antivirus9.0.0 – 9.0.0
• Symantec / norton_antivirus9.0.0.338 – 9.0.0.338
• Symantec / norton_antivirus9.0.1 – 9.0.1
• Symantec / norton_antivirus9.0.1.1.1000 – 9.0.1.1.1000
• Symantec / norton_antivirus9.0.2 – 9.0.2
• Symantec / norton_antivirus9.0.2.1000 – 9.0.2.1000
• Symantec / norton_antivirus9.0.3 – 9.0.3
• Symantec / norton_antivirus9.0.3.1000 – 9.0.3.1000
• Symantec / norton_antivirus9.0.4 – 9.0.4
• Symantec / norton_antivirus9.0.4 – 9.0.4
• Symantec / norton_antivirus9.0.5 – 9.0.5
• Symantec / norton_antivirus9.0.5.1100 – 9.0.5.1100
• Symantec / norton_antivirus9.0.6.1000 – 9.0.6.1000
• Symantec / norton_antivirus10.0 – 10.0
• Symantec / norton_antivirus10.0 – 10.0
• Symantec / norton_antivirus10.0.0 – 10.0.0
• Symantec / norton_antivirus10.0.0.359 – 10.0.0.359
• Symantec / norton_antivirus10.0.1 – 10.0.1
• Symantec / norton_antivirus10.0.1.1000 – 10.0.1.1000
• Symantec / norton_antivirus10.0.1.1007 – 10.0.1.1007
• Symantec / norton_antivirus10.0.1.1008 – 10.0.1.1008
• Symantec / norton_antivirus10.0.2.2000 – 10.0.2.2000
• Symantec / norton_antivirus10.0.2.2001 – 10.0.2.2001
• Symantec / norton_antivirus10.0.2.2002 – 10.0.2.2002
• Symantec / norton_antivirus10.0.2.2010 – 10.0.2.2010
• Symantec / norton_antivirus10.0.2.2011 – 10.0.2.2011
• Symantec / norton_antivirus10.0.2.2020 – 10.0.2.2020
• Symantec / norton_antivirus10.0.2.2021 – 10.0.2.2021
• Symantec / norton_antivirus10.1 – 10.1
• Symantec / norton_antivirus10.1.4 – 10.1.4
• Symantec / norton_antivirus10.1.4 – 10.1.4
• Symantec / norton_antivirus10.1.4.4010 – 10.1.4.4010
• Symantec / norton_antivirus10.1.394 – 10.1.394
• Symantec / norton_antivirus10.1.396 – 10.1.396
• Symantec / norton_antivirus10.1.400 – 10.1.400
• Symantec / norton_antivirus10.1.401 – 10.1.401
• Symantec / norton_antivirus10.9.1 – 10.9.1
• Symantec / norton_antivirus2004 – 2004
• Symantec / norton_antivirus2004 – 2004
• Symantec / norton_antivirus2005 – 2005
• Symantec / norton_antivirus2005 – 2005
• Symantec / norton_antivirus2005 – 2005
• Symantec / norton_antivirus2006 – 2006
• Symantec / norton_internet_security2005 – 2005
• Symantec / norton_internet_security2005 – 2005
• Symantec / norton_internet_security2005 – 2005
• Symantec / norton_internet_security2005 – 2005
• Symantec / norton_internet_security2005 – 2005
• Symantec / norton_internet_security2006 – 2006
• Symantec / norton_internet_security2006 – 2006
• Symantec / norton_internet_security2004 – 2004
• Symantec / norton_internet_security2004 – 2004
• Symantec / norton_internet_security3.0 – 3.0
• Symantec / norton_personal_firewall2006_9.1.1.7 – 2006_9.1.1.7
• Symantec / norton_personal_firewall2006_9.1.0.33 – 2006_9.1.0.33
• Symantec / norton_personal_firewall2006 – 2006
• Symantec / norton_system_works2005 – 2005
• Symantec / norton_system_works2005 – 2005
• Symantec / norton_system_works2005 – 2005
• Symantec / norton_system_works2006 – 2006
• Symantec / norton_system_works3.0 – 3.0
• Symantec / norton_system_works2004 – 2004
• Symantec / norton_system_works2005 – 2005
• Symantec / symantec_antivirus_filtering_+for_domino3.0.12 – 3.0.12
• Symantec / web_security3.0.1.70 – 3.0.1.70
• Symantec / web_security3.0.1.76 – 3.0.1.76
• Symantec / web_security3.0.1_build_3.01.70 – 3.0.1_build_3.01.70
• Symantec / web_security3.0.1_build_3.01.72 – 3.0.1_build_3.01.72
• Symantec / web_security3.0.1_build_3.01.74 – 3.0.1_build_3.01.74
• Symantec / web_security3.01.59 – 3.01.59
• Symantec / web_security3.01.60 – 3.01.60
• Symantec / web_security3.0.1 – 3.0.1
• Symantec / web_security3.01.62 – 3.01.62
• Symantec / web_security3.01.63 – 3.01.63
• Symantec / web_security3.01.67 – 3.01.67
• Symantec / web_security3.01.68 – 3.01.68
• Symantec / web_security5.0 – 5.0
• Symantec / web_security3.0 – 3.0
• Symantec / web_security2.5 – 2.5
• Symantec / web_security3.01.61 – 3.01.61

References

• VENDOR_ADVISORYhttp://secunia.com/advisories/26053
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2007/2508
• MISChttp://osvdb.org/36119
• VENDOR_ADVISORYhttp://www.zerodayinitiative.com/advisories/ZDI-07-039.html
• MISChttp://securityresponse.symantec.com/avcenter/security/Content/2007.07.11f.html
• MISChttp://www.securityfocus.com/bid/24282