CVE Feed

    Dashboard / CVE / CVE-2007-1689

    CVE-2007-1689

    Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.

    Published:May 16, 2007
    Last Modified:Apr 23, 2026
    EPS:May 16, 2007
    EPSS Score:0.7904
    CVSS Score:10

    Affected Products

    Vendor
    Symantec
    Product
    Norton Internet Security
    Vendor
    Symantec
    Product
    Norton Personal Firewall

    Exploits

    https://www.exploit-db.com/exploits/16610

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2016-5311 (CVSS 7.8) — A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton…
    CVE-2016-2211 (CVSS 7.8) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-3645 (CVSS 9.8) — Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protectio…
    CVE-2016-3646 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-2207 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-3644 (CVSS 8.4) — The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Se…
    CVE-2016-2210 (CVSS 7.3) — Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP)…
    CVE-2016-2209 (CVSS 7.3) — Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP);…
    CVE-2010-0107 (CVSS 9.3) — Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, A…
    CVE-2009-3104 (CVSS 4.3) — Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 throug…

    References

    http://osvdb.org/36164
    http://secunia.com/advisories/25290
    http://www.kb.cert.org/vuls/id/983953
    http://www.securityfocus.com/archive/1/468779/100/0/threaded
    http://www.securityfocus.com/bid/23936
    http://www.securitytracker.com/id?1018073
    http://www.symantec.com/avcenter/security/Content/2007.05.16.html
    http://www.vupen.com/english/advisories/2007/1843
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34328
    http://osvdb.org/36164
    http://secunia.com/advisories/25290
    http://www.kb.cert.org/vuls/id/983953
    http://www.securityfocus.com/archive/1/468779/100/0/threaded
    http://www.securityfocus.com/bid/23936
    http://www.securitytracker.com/id?1018073
    http://www.symantec.com/avcenter/security/Content/2007.05.16.html
    http://www.vupen.com/english/advisories/2007/1843
    https://exchange.xforce.ibmcloud.com/vulnerabilities/34328

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High