1. CVE-Search
  2. CVE-2004-0364
ID CVE-2004-0364
Summary The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.
References
Vulnerable Configurations
  • cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:norton_internet_security:2004:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*
    cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*
CVSS
Base: 7.5 (as of 11-07-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 9915
bugtraq
  • 20040319 Norton Internet Security Remote Command Execution (#NISR19042004b)
  • 20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b
cert-vn VU#549054
confirm http://www.sarc.com/avcenter/security/Content/2004.03.19.html
misc http://www.nextgenss.com/advisories/nisrce.txt
secunia 11168
xf norton-is-launchurl-command-execution(15538)
Last major update 11-07-2017 - 01:30
Published 15-04-2004 - 04:00
Last modified 11-07-2017 - 01:30
Back to Top