CVE-2010-0107: Symantec Client Security

High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days.

Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."

Affected products

• Symantec Client Security: version 3.0 only; version 3.0.1.1000 only; version 3.0.1.1001 only; version 3.0.1.1007 only; version 3.0.1.1008 only; version 3.0.1.1009 only; …
• Symantec Norton 360: version 1.0 only; version 2.0 only
• Symantec Norton Antivirus: version 2006 only; version 2007 only; version 2008 only
• Symantec Norton Internet Security: version 2006 only; version 2007 only; version 2008 only

Published 2010-02-23. Last modified 2026-06-16.