漏洞描述
Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.
影响产品
暂无结构化产品信息。
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
www.securityfocus.comhttp://www.securityfocus.com/bid/9916↗www.nextgenss.comhttp://www.nextgenss.com/advisories/antispam.txt↗marc.infohttp://marc.info/?l=bugtraq&m=107980262324362&w=2↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/15536↗marc.infohttp://marc.info/?l=bugtraq&m=107970870606638&w=2↗www.kb.cert.orghttp://www.kb.cert.org/vuls/id/344718↗secunia.comhttp://secunia.com/advisories/11169↗www.sarc.comhttp://www.sarc.com/avcenter/security/Content/2004.03.19.html↗