cbcvebase.
CVE-2005-0249
published 2005-02-08

CVE-2005-0249: Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file…

PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
18.83%
97.0th percentile
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.

Affected

46 ranges· showing 25
VendorProductVersion rangeFixed in
symantecantivirus_scan_engine< 4.3.34.3.3
symantecbrightmail_antispam——
symantecbrightmail_antispam——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecclient_security——
symantecgateway_security——
symantecgateway_security——
symantecgateway_security——
symantecmail_security——
symantecmail_security——
symantecmail_security——
symantecnorton_antivirus——
symantecnorton_antivirus——
symantecnorton_antivirus——
symantecnorton_antivirus——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.