CVE-2008-0312

Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, allows remote attackers to execute arbitrary code via a long argument to the GetEventLogInfo method. NOTE: some of these details are obtained from third party information.

• CWE-119

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677
• http://secunia.com/advisories/29660Patch, Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.htmlPatch
• http://www.securityfocus.com/bid/28507Patch
• http://www.securitytracker.com/id?1019751Patch
• http://www.securitytracker.com/id?1019752Patch
• http://www.securitytracker.com/id?1019753Patch
• http://www.vupen.com/english/advisories/2008/1077/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41629
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=677
• http://secunia.com/advisories/29660Patch, Vendor Advisory
• http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.htmlPatch
• http://www.securityfocus.com/bid/28507Patch
• http://www.securitytracker.com/id?1019751Patch
• http://www.securitytracker.com/id?1019752Patch
• http://www.securitytracker.com/id?1019753Patch
• http://www.vupen.com/english/advisories/2008/1077/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41629

Published

Apr 8, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0306sdbstarter in SAP MaxDB 7.6.0.37, and possibly other version…
• CVE-2008-0307Integer signedness error in vserver in SAP MaxDB 7.6.0.37, a…
• CVE-2008-0308Symantec Decomposer, as used in certain Symantec antivirus p…
• CVE-2008-0309Stack-based buffer overflow in Symantec Decomposer, as used …
• CVE-2008-0310Directory traversal vulnerability in pkgadd in SCO UnixWare …
• CVE-2008-0311Stack-based buffer overflow in the PGMWebHandler::parse_requ…
• CVE-2008-0313The ActiveDataInfo.LaunchProcess method in the SymAData.Acti…
• CVE-2008-0314Heap-based buffer overflow in spin.c in libclamav in ClamAV …
• CVE-2008-0318Integer overflow in the cli_scanpe function in libclamav in …
• CVE-2008-0320Heap-based buffer overflow in the OLE importer in OpenOffice…
• CVE-2008-0322The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 fo…7.8
• CVE-2008-0324Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.…