CVE-2007-0447: Symantec Antivirus Scan Engine
High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days.
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
Affected products
- Symantec Antivirus Scan Engine: version 4.0 only; version 4.1 only; version 4.1.8 only; version 4.3 only; version 4.3.3 only; version 4.3.7.27 only; …
- Symantec Brightmail Antispam: version 4.0 only; version 5.5 only; version 6.0 only; version 6.0.1 only; version 6.0.2 only; version 6.0.3 only; …
- Symantec Client Security: version 2.0 only; version 2.0.1_build_9.0.1.1000 only; version 2.0.2_build_9.0.2.1000 only; version 2.0.3_build_9.0.3.1000 only; version 2.0.4 only; version 2.0.5_build_1100_mp1 only; …
- Symantec Gateway Security 5000 Series: version 3.0.1 only
- Symantec Gateway Security 5400: version 2.0.1 only
- Symantec Mail Security: version 4.0 only; version 4.0.1 only; version 4.1 only; version 4.5 only; version 4.5.4.743 only; version 4.5_build_719 only; …
- Symantec Mail Security 8820 Appliance: any version
- Symantec Norton Antivirus: any version; version 9.0 only; version 9.0.0 only; version 9.0.0.338 only; version 9.0.1 only; version 9.0.1.1.1000 only; …
- Symantec Norton Internet Security: version 3.0 only; version 2004 only; version 2005 only; version 2006 only
- Symantec Norton Personal Firewall: version 2006 only; version 2006_9.1.0.33 only; version 2006_9.1.1.7 only
- Symantec Norton System Works: version 3.0 only; version 2004 only; version 2005 only; version 2006 only
- Symantec Symantec Antivirus Filtering +for Domino: version 3.0.12 only
- Symantec Web Security: version 2.5 only; version 3.0 only; version 3.0.1 only; version 3.0.1.70 only; version 3.0.1.76 only; version 3.0.1_build_3.01.70 only; …
Published 2007-10-05. Last modified 2026-06-16.