CVE-2008-0313
mediumpriority · track · 28EPSS 0.040 · 91 %ileEUUSEPSS · scored 2026-10-28
The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through 2008, Internet Security 2006 through 2008, and System Works 2006 through 2008, does not properly determine the location of the AutoFix Tool, which allows remote attackers to execute arbitrary code via a remote (1) WebDAV or (2) SMB share.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (11)
Products and version ranges known to be affected.
- symantec norton internet security= 2006nvdUScpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:*
- symantec norton internet security= 2007nvdUScpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:*
- symantec norton internet security= 2008nvdUScpe:2.3:a:symantec:norton_internet_security:*:*:*:*:*:*:*:*
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (18)
External citations — patches, advisories, analysis.
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=678enisa_euvd
- http://secunia.com/advisories/29660enisa_euvd
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.02a.htmlenisa_euvd
- http://www.securityfocus.com/bid/28509enisa_euvd
- http://www.securitytracker.com/id?1019751enisa_euvd
- http://www.securitytracker.com/id?1019752enisa_euvd
- http://www.securitytracker.com/id?1019753enisa_euvd
- http://www.vupen.com/english/advisories/2008/1077/referencesenisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan