Symantec Scan Engine vulnerabilities

3 CVEs affecting Symantec Scan Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4953, published 2012-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-4953, published 2012-11-14. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine…
CVE-2008-0309, published 2008-02-28. Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days. Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to…
CVE-2008-0308, published 2008-02-28. High severity, CVSS 7.1. EPSS: 2.6% chance of exploitation in the next 30 days. Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, allows remote attackers to cause a denial of service…