CVE-2008-0313
Last modified
CVE-2008-0313 is a vulnerability of currently unknown severity. The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.. EPSS estimates a 4.03% chance of exploitation in the next 30 days.
Description
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Norton 360 | 1.0 |
| Symantec | Norton Antivirus | 2006 |
| Symantec | Norton Antivirus | 2007 |
| Symantec | Norton Antivirus | 2008 |
| Symantec | Norton Internet Security | 2006 |
| Symantec | Norton Internet Security | 2007 |
| Symantec | Norton Internet Security | 2008 |
| Symantec | System Works | 2006 |
| Symantec | System Works | 2007 |
| Symantec | System Works | 2008 |
References
- http://secunia.com/advisories/29660Patch, Vendor Advisory
- http://secunia.com/advisories/29660Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0313?
How severe is CVE-2008-0313?
How do I fix CVE-2008-0313?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0307Integer signedness error in vserver in SAP MaxDB 7.6.0.37, a…
- CVE-2008-0308Symantec Decomposer, as used in certain Symantec antivirus p…
- CVE-2008-0309Stack-based buffer overflow in Symantec Decomposer, as used …
- CVE-2008-0310Directory traversal vulnerability in pkgadd in SCO UnixWare …
- CVE-2008-0311Stack-based buffer overflow in the PGMWebHandler::parse_requ…
- CVE-2008-0312Stack-based buffer overflow in the AutoFix Support Tool Acti…
- CVE-2008-0314Heap-based buffer overflow in spin.c in libclamav in ClamAV …
- CVE-2008-0318Integer overflow in the cli_scanpe function in libclamav in …
- CVE-2008-0320Heap-based buffer overflow in the OLE importer in OpenOffice…
- CVE-2008-0322The I2O Utility Filter driver (i2omgmt.sys) 5.1.2600.2180 fo…7.8
- CVE-2008-0324Cisco Systems VPN Client IPSec Driver (CVPNDRVA.sys) 5.0.02.…
- CVE-2008-0325SQL injection vulnerability in show.php in FaScript FaPersia…
Are you affected by CVE-2008-0313?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST