Symantec Gateway Security 5000 Series vulnerabilities

3 CVEs affecting Symantec Gateway Security 5000 Series, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3699, published 2007-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-0447, published 2007-10-05. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
CVE-2007-3699, published 2007-10-05. High severity, CVSS 9.3. EPSS: 3.9% chance of exploitation in the next 30 days. The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
CVE-2005-3768, published 2005-11-23. High severity, CVSS 7.5. EPSS: 3.8% chance of exploitation in the next 30 days. Buffer overflow in the Internet Key Exchange version 1 (IKEv1) implementation in Symantec Dynamic VPN Services, as used in Enterprise Firewall, Gateway Security, and Firewall /VPN Appliance products,…