CVE-2007-2955: Symantec Norton Antivirus

Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days.

Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiVirus, Internet Security, and System Works products for 2006, allows remote attackers to execute arbitrary code via (1) the AnomalyList property to AxSysListView32 and (2) Anomaly property to AxSysListView32OAA.

Affected products

• Symantec Norton Antivirus: version 2006 only
• Symantec Norton Internet Security: version 2005 only; version 2006 only
• Symantec Norton System Works: version 2006 only

Published 2007-08-09. Last modified 2026-06-16.