CVE-2005-1346: Symantec Antivirus Scan Engine

Low severity, CVSS 2.6. EPSS: 1.5% chance of exploitation in the next 30 days.

Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.

Affected products

• Symantec Antivirus Scan Engine: version 4.3.7.27 only
• Symantec Mail Security: version 4.0.5.66 only; version 4.5.4.743 only
• Symantec Norton Antivirus: version 2005_11.0.0 only
• Symantec Norton Internet Security: version 2005_contains_nav_11.0.0 only
• Symantec Norton System Works: version 2005_contains_nav_11.0.0 only
• Symantec Symav Filter Domino Nt: version 3.1.1.87 only
• Symantec Web Security: version 3.0.1.72 only

Published 2005-05-02. Last modified 2026-06-16.