CVE-2007-1689: Symantec Norton Internet Security

High severity, CVSS 10.0. EPSS: 65% chance of exploitation in the next 30 days.

Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.

Affected products

• Symantec Norton Internet Security: version 2004 only
• Symantec Norton Personal Firewall: version 2004 only

Published 2007-05-16. Last modified 2026-06-16.