Symantec Norton Antispam vulnerabilities

6 CVEs affecting Symantec Norton Antispam, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3673, published 2007-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-0363, published 2004-04-15. High severity, CVSS 7.5. EPSS: 66.6% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code…
CVE-2004-0444, published 2004-07-07. High severity, CVSS 10.0. EPSS: 12.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01…
CVE-2004-0445, published 2004-07-07. Low severity, CVSS 2.6. EPSS: 11% chance of exploitation in the next 30 days. The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and…
CVE-2007-1793, published 2007-04-02. Medium severity, CVSS 4.9. EPSS: 1.7% chance of exploitation in the next 30 days. SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause…
CVE-2007-3673, published 2007-07-15. Medium severity, CVSS 6.9. EPSS: 1.1% chance of exploitation in the next 30 days. Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton AntiVirus, Internet…
CVE-2007-1476, published 2007-03-16. Low severity, CVSS 1.9. EPSS: 0.9% chance of exploitation in the next 30 days. The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other…