Symantec Mail Security 8820 Appliance vulnerabilities

2 CVEs affecting Symantec Mail Security 8820 Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3699, published 2007-10-05.

More from Symantec.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-0447, published 2007-10-05. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.
• CVE-2007-3699, published 2007-10-05. High severity, CVSS 9.3. EPSS: 3.9% chance of exploitation in the next 30 days. The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.