CVE-2007-3953

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-24 · updated 2026-06-16

Description

The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted DOC file that triggers a divide-by-zero error.

Affected products

Norman Virus Control: through 5.90

References

http://osvdb.org/37980
http://secunia.com/advisories/26178
http://securityreason.com/securityalert/2914
http://www.nruns.com/security_advisory_norton_antivirus_doc_divide_by_zero_dos.php
http://www.securityfocus.com/archive/1/474450/100/0/threaded
http://www.securityfocus.com/bid/25014
http://www.securitytracker.com/id?1018438
http://www.vupen.com/english/advisories/2007/2619
https://exchange.xforce.ibmcloud.com/vulnerabilities/35554
http://osvdb.org/37980
http://secunia.com/advisories/26178
http://securityreason.com/securityalert/2914

Get alerted when CVE-2007-3953 or the next vulnerability affects your stack