What’s Vulnerable › Vulnerabilities

CVE-2010-0107

• Severity: critical (CVSS 9.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2010-02-23 · updated 2026-06-16
• Weakness: CWE-119

Description

Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can "masquerade as an authorized site."

Affected products

• Symantec Client Security: 3.0, 3.0.1.1000, 3.0.1.1001, 3.0.1.1007, 3.0.1.1008, 3.0.1.1009 (+17)
• Symantec Norton 360: 1.0, 2.0
• Symantec Norton Antivirus: 2006, 2007, 2008
• Symantec Norton Internet Security: 2006, 2007, 2008

References

• http://osvdb.org/62412
• http://secunia.com/advisories/38654
• http://www.securityfocus.com/archive/1/509717/100/0/threaded
• http://www.securityfocus.com/bid/38217
• http://www.securitytracker.com/id?1023628
• http://www.securitytracker.com/id?1023629
• http://www.securitytracker.com/id?1023630
• http://www.securitytracker.com/id?1023631
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01
• http://www.vupen.com/english/advisories/2010/0411
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56357
• http://osvdb.org/62412

Get alerted when CVE-2010-0107 or the next vulnerability affects your stack