March 31, 2005....53 March 23, 2005....54 March 8, 2005...55 February 22, 2005...56 February 10, 2005...57 January 25, 2005....59 January 12, 2005....59 January 10, 2005....60 December 22, 2004....60 December 15, 2004....61 December 2, 2004....63 November 30, 2004....63 November 16, 2004....64 November 9, 2004....65 November 2, 2004....65 October 18, 2004....67 October 12, 2004....68 October 6, 2004....69 September 21, 2004....70 September 14, 2004....71 September 7, 2004...71 August 18, 2004....72 August 10, 2004....74 July 30, 2004....75 July 27, 2004....75 July 13, 2004....79 July 6, 2004...80 June 29, 2004....81 June 15, 2004....83 June 8, 2004....84 June 1, 2004....84 May 18, 2004....85 May 11, 2004....86 May 4, 2004....86 April 20, 2004....88 April 13, 2004....89 April 6, 2004....90 March 23, 2004....92 March 9, 2004...94 February 24, 2004...96 February 10, 2004...97 February 3, 2004....98 January 27, 2004....98
January 14, 2004... 99 December 30, 2003.... 100 December 17, 2003.... 101 December 3, 2003.... 103 November 20, 2003... 104 November 11, 2003... 106 November 6, 2003.... 106 October 23, 2003... 109 October 15, 2003... 111 October 8, 2003... 111 September 24, 2003... 112 September 16, 2003... 112 September 11, 2003... 113 August 28, 2003.... 113 August 12, 2003.... 115 July 29, 2003... 117 July 17, 2003... 117 July 15, 2003... 118

March 2, 2007

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 22 additional vulnerabilities and 1 updated vulnerability. The following table includes information about the 22 additional vulnerabilities. Bugtraq ID
Microsoft HTML Help ActiveX Control Remote Code Execution Vulnerability Microsoft Internet Explorer ADODB.Connection Execute Memory Corruption Vulnerability Microsoft Word Malformed String Arbitrary Remote Code Execution Vulnerability Microsoft Word Malformed Data Structures Code Execution Vulnerability Microsoft Word Code Execution Vulnerability Microsoft Word 2000 Malformed Function Code Execution Vulnerability Microsoft Word Malformed Drawing Object Arbitrary Code Execution Vulnerability Microsoft Word Macro Permissions Bypass Arbitrary Code Execution Vulnerability Microsoft PowerPoint Record Improper Memory Access Remote Code Execution Vulnerability Microsoft Office Malformed String Remote Code Execution Vulnerability

22225 22482

14 Vulnerability Update Release Notes March 2, 2007

Bugtraq ID

Microsoft Internet Explorer IMJPCKSI COM Object Instantiation Memory Corruption Vulnerability Microsoft Internet Explorer WinINet.DLL FTP Server Response Parsing Memory Corruption Vulnerability Microsoft Internet Explorer COM Object Instantiation Variant Memory Corruption Vulnerability Microsoft Windows Shell Hardware Detection Service Privilege Escalation Vulnerability Microsoft Windows Image Acquisition Service Privilege Escalation Vulnerability Microsoft Windows OLE Dialog Remote Code Execution Vulnerability Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability Microsoft Office And Microsoft Windows RichEdit Component Remote Code Execution Vulnerability Microsoft Excel IMDATA Record Remote Code Execution Vulnerability Microsoft Excel Malformed String Remote Code Execution Vulnerability Microsoft Excel Malformed Palette Record Remote Code Execution Vulnerability Microsoft Excel Malformed Column Record Remote Code Execution Vulnerability

19092 19069

18277 11826

19013 19113

19184 19114
Microsoft Internet Explorer Object.Microsoft.DXTFilter Denial Of Service Vulnerability Microsoft Internet Explorer OuterHTML Redirection Handling Information Disclosure Vulnerability Microsoft Internet Explorer OVCtl Denial Of Service Vulnerability Microsoft Internet Explorer RevealTrans Denial Of Service Vulnerability Microsoft Internet Explorer Source Element Cross-Domain Information Disclosure Vulnerability Microsoft Internet Explorer String To Binary Function Denial Of Service Vulnerability Microsoft Internet Explorer Structured Graphics Control Denial Of Service Vulnerability Microsoft Internet Explorer Table Frameset Denial Of Service Vulnerability Microsoft Internet Explorer TriEditDocument Denial Of Service Vulnerability Microsoft Internet Explorer WebViewFolderIcon Denial Of Service Vulnerability Microsoft Internet Explorer Window Location Cross-Domain Information Disclosure Vulnerability Microsoft Management Console Zone Bypass Vulnerability Microsoft Office MSO.DLL LsCreateLine() Potential Code Execution Vulnerability Microsoft Powerpoint Multiple Unspecified Vulnerabilities Microsoft Powerpoint Remote Code Execution Vulnerability Microsoft Powerpoint Remote Code Execution Vulnerability Microsoft Visual Basic for Applications Document Check Buffer Overflow Vulnerability Microsoft Windows 2000 Kernel Local Privilege Escalation Vulnerability Microsoft Windows DNS Client Buffer Overrun Vulnerability Microsoft Windows Graphical Device Interface Plus Library Denial Of Service Vulnerability

19417 18905

19341 19414
22 Vulnerability Update Release Notes July 18, 2006
Microsoft Windows HTML Help HHCtrl ActiveX Control Memory Corruption Vulnerability Microsoft Windows MHTML URI Buffer Overflow Vulnerability Microsoft Windows Remote Denial of Service Vulnerability Microsoft Windows Routing and Remote Access Denial of Service Vulnerability Microsoft Windows Server Service Remote Buffer Overflow Vulnerability Microsoft Windows SMB PIPE Remote Denial of Service Vulnerability Microsoft Winsock Gethostbyname Buffer Overflow Vulnerability Mozilla Firefox Javascript Navigator Object Remote Code Execution Vulnerability Mozilla Foundation Products XPCOM Memory Corruption Vulnerability Mozilla Multiple Products Remote Vulnerabilities Opera Web Browser CSS Background HTTPS URI Memory Corruption Vulnerability Sun Solaris NIS Server YPServ Unspecified Denial of Service Vulnerability Yahoo! Messenger Remote Search String Arbitrary Browser Navigation Vulnerability

15773 15835

34 Vulnerability Update Release Notes December 13, 2005

15881 15880

IBM AIX Debug Malloc Tools Local Buffer Overflow Vulnerability IBM AIX GetShell and GetCommand Arbitrary File Overwrite Vulnerability IBM AIX MUXATMD Local Buffer Overflow Vulnerability IBM AIX slocal Local Buffer Overflow Vulnerability IBM AIX UMOUNTALL Unspecified Absolute Path Security Vulnerability Real Networks RealPlayer Unspecified Remote Code Execution Vulnerability

15758 15691

December 13, 2005
This content update for Symantec Vulnerability Assessment 1.0 detects and reports 4 additional vulnerabilities and 1 updated vulnerability. The following table includes information about the 4 new vulnerabilities. Bugtraq ID
Microsoft Internet Explorer COM Object Instantiation Memory Corruption Vulnerability Microsoft Internet Explorer Dialog Manipulation Vulnerability Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability Microsoft Windows Asynchronous Procedure Call Local Privilege Escalation Vulnerability

15823 15825

Updated vulnerability
Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution Vulnerability
Vulnerability Update Release Notes December 7, 2005

December 7, 2005

HP-UX IKE Exchange Denial Of Service Vulnerabilities IBM AIX Diagela.SH Unspecified Security Vulnerability Microsoft Internet Explorer CSS Import Cross-Domain Restriction Bypass Vulnerability Microsoft Windows CreateRemoteThread Local Denial of Service Vulnerability Microsoft Windows SynAttackProtect Predictable Hash Remote Denial of Service Vulnerability Multiple Vendor lpCommandLine Application Path Vulnerability Opera Web Browser Arbitrary Command Execution Vulnerability Opera Web Browser HTML Form Status Bar Misrepresentation Vulnerability

November 22, 2005

IBM AIX SWCONS Local Buffer Overflow Vulnerability Multiple Vendor Web Browser Cookie Hostname Handling Weakness HP-UX ENVD Local Privilege Escalation Vulnerability HP-UX RemSHD Unspecified Unauthorized Access Vulnerability RealNetworks RealOne Player/RealPlayer RM File Remote Stack Based Buffer Overflow Vulnerabililty RealNetworks RealPlayer DUNZIP32.DLL Heap Overflow Vulnerability Sun Solaris In. Named Remote Denial of Service Vulnerability

15382 15384

36 Vulnerability Update Release Notes November 8, 2005
RealNetworks RealPlayer Unspecified Malformed Image Skin File Buffer Overflow HP-UX XTerm Unspecified Local Unauthorized Access Vulnerability Sun Solaris LibIKE IKE Exchange Denial of Service Vulnerability Microsoft Windows Plug and Play Denial of Service Vulnerability

Microsoft Word Malformed Document Buffer Overflow Vulnerability

June 7, 2005

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 21 additional vulnerabilities. The following table includes information about the 21 new vulnerabilities. Bugtraq ID
Microsoft Outlook HTML Email URI Spoofing Vulnerability Microsoft Word MCW File Handler Buffer Overflow Vulnerability Multiple Vendor Libcurses Buffer Overflow Vulnerability Solaris IPCS Timezone Buffer Overflow Vulnerability Sun Basic Security Module Audit_warn Warning Message Email Failure Weakness Sun Solaris BSMUNCONV Root Crontab Overwrite Vulnerability Sun Solaris Directory Creation Kernel Panic Vulnerability Sun Solaris IN.RSHD Unauthorized Connection Vulnerability Sun Solaris LLC2 Network Driver Multicast Packet Denial Of Service Vulnerability Sun Solaris Local Fopen() Denial Of Service Vulnerability Sun Solaris Mailx Unspecified Vulnerability Sun Solaris Missing KRB5.CONF Unauthorized Login Vulnerability

13721 13740

48 Vulnerability Update Release Notes May 24, 2005

13750 13741

Sun Solaris Powerd Unspecified Buffer Overflow Vulnerability Sun Solaris Remote Unspecified DCS Denial Of Service Vulnerability Sun Solaris RMFormat Unspecified Buffer Overflow Vulnerabilities Sun Solaris SDTSmartCardAdmin Unspecified Security Vulnerability Sun Solaris SSH IKE Information Disclosure Vulnerability Sun Solaris Smart Card PAM.CONF Lowered Security Settings Vulnerability Sun Solaris Unspecified OCFServ Vulnerability Sun Solaris USB Attachment Points Insecure Default Permissions Vulnerability Sun TTYMux Kernel Memory Disclosure Vulnerability

13726 13738

May 24, 2005
This content update for Symantec Vulnerability Assessment 1.0 detects and reports 12 additional vulnerabilities. The following table includes information about the 12 new vulnerabilities. Bugtraq ID
Apache HTDigest Realm Command Line Argument Buffer Overflow Vulnerability Microsoft IPV6 TCPIP Loopback LAND Denial of Service Vulnerability Microsoft SQL Server 2000 Multiple Vulnerabilities Microsoft Windows Media Player Digital Rights Management Arbitrary Web Page Launch Weakness Mozilla Firefox Install Method Remote Arbitrary Code Execution Vulnerability Mozilla Suite And Firefox DOM Property Overrides Code Execution Vulnerability Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities Multiple Vendor TCP Timestamp PAWS Remote Denial Of Service Vulnerability
Vulnerability Update Release Notes May 11, 2005

13552 13626

RealNetworks RealPlayer Unspecified Code Execution Vulnerability Sun Solaris automountd Local Denial Of Service Vulnerability Sun Solaris NIS+ Unspecified Remote Denial Of Service Vulnerability Yahoo! Messenger URL Handler Remote Denial Of Service Vulnerability

13132 12969

The following table includes information about 3 updated vulnerabilities. Bugtraq ID

11264 11196

IBM CTSTRTCASD Utility Local File Corruption Vulnerability LibXpm Image Decoding Multiple Remote Buffer Overflow Vulnerabilities
Vulnerability Update Release Notes March 31, 2005
Multiple Vendor loopback (land.c) Denial of Service Vulnerability

March 31, 2005

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 15 additional vulnerabilities and 9 updated vulnerabilities. The following tables include information about the vulnerabilities. Bugtraq ID
Apache mod_ssl ssl_io_filter_cleanup Remote Denial Of Service Vulnerability Microsoft Windows Graphical Device Interface Library Denial Of Service Vulnerability Microsoft Windows Local Denial Of Service Vulnerability Microsoft Windows XP TSShutdn.exe Remote Denial of Service Vulnerability MIT Kerberos 5 Administration Library Add_To_History Heap-Based Buffer Overflow Vulnerability Mozilla Browser Remote Insecure XUL Start Up Script Loading Vulnerability Mozilla Firefox Address Bar Image Dragging Remote Script Execution Vulnerability Mozilla Firefox Sidebar Panel Script Injection Vulnerability Mozilla GIF Image Processing Library Remote Heap Overflow Vulnerability Multiple Browser Information Disclosure Weakness PHP Glob Function Local Information Disclosure Vulnerability RealNetworks RealOne Player/RealPlayer SMIL File Remote Stack Based Buffer Overflow Vulnerability RealNetworks RealOne Player/RealPlayer Unspecified WAV File Processing Buffer Overflow Vulnerability Sun Solaris NewGRP Local Buffer Overflow Vulnerability

12870 12889

54 Vulnerability Update Release Notes March 23, 2005
Yahoo! Messenger Offline Mode Status Remote Buffer Overflow Vulnerability
The following table includes information about 9 updated vulnerabilities. Bugtraq Title ID
LibPNG Graphics Library Multiple Remote Vulnerabilities Microsoft Internet Explorer BackToFramedJPU Cross-Domain Policy Vulnerability Microsoft Internet Explorer NavigateAndFind() Cross-Zone Policy Vulnerability Microsoft Internet Explorer Self Executing HTML File Vulnerability Microsoft Outlook Express MHTML Forced File Execution Vulnerability Microsoft Outlook Express MHTML Redirection Local File Parsing Vulnerability Microsoft Windows Media Player IE Zone Access Control Bypass Vulnerability Microsoft Windows Shell CLSID File Extension Misrepresentation Vulnerability Multiple Browser URI Display Obfuscation Weakness

12479 12480

12481 12483
Multiple Browser URI Obfuscation Weakness Microsoft Internet Explorer Implicit Drag and Drop File Installation Vulnerability Microsoft Internet Explorer Valid File Drag and Drop Embedded Code Vulnerability Microsoft Windows DHTML Edit Control Script Injection Vulnerability Microsoft Internet Explorer Method Caching Mouse Click Event Hijacking Vulnerability

11950 9108

Vulnerability Update Release Notes January 25, 2005

January 25, 2005

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 6 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID

12186 12223

Microsoft Multiple Unspecified Security Vulnerabilities Microsoft Office Encrypted Documents RC4 Initialization Vector Implementation Vulnerability Microsoft Windows User32.DLL ANI File Header Handling Stack-Based Buffer Overflow Vulnerability Mozilla/Netscape/Firefox Browser Modal Dialog Spoofing Vulnerability Microsoft Internet Explorer Dynamic IFRAME File Download Security Warning Bypass Weakness Sun Solaris Management Console User Interface Insecure Account Creation Vulnerability

12234 12264

January 12, 2005
This content update for Symantec Vulnerability Assessment 1.0 detects and reports 1 additional vulnerability and 3 updated vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID

12228 12095

Microsoft Windows ANI File Denial of Service Vulnerability Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability Microsoft Windows Indexing Service Buffer Overflow Vulnerability Microsoft Windows LoadImage API Function Integer Overflow Vulnerability
60 Vulnerability Update Release Notes January 10, 2005

January 10, 2005

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 13 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID

12094 12095

HP-UX FTP Server Debug Logging Mode Buffer Overflow Vulnerability HP-UX System Administration Manager Privilege Escalation Vulnerability IBM AIX CHCOD Local Privilege Escalation Vulnerability IBM AIX LSVPD Local Privilege Escalation Vulnerability Microsoft Internet Explorer FTP Client Directory Traversal Vulnerability Microsoft Internet Explorer Local File Disclosure Weakness Microsoft Windows ANI File Denial of Service Attack Microsoft Windows LoadImage API Function Integer Overflow Vulnerability Microsoft Windows winhlp32 Phrase Heap Overflow Vulnerability Microsoft Windows winhlp32 Phrase Integer Overflow Vulnerability Microsoft Windows XP Firewall ACL Bypass Vulnerability Mozilla Browser Network News Transport Protocol Remote Heap OverflowVulnerability Mozilla/Firefox File Download Dialog Spoofing Vulnerability

Vulnerability Update Release Notes November 9, 2004
RealNetworks RealOne Player/RealPlayer Skin File Remote Stack Based Buffer Overflow Vulnerability Solaris in.fingerd Information Disclosure Vulnerability Solaris NFS lockd Remote Denial of Service Vulnerability Sun Solaris Runtime Linker LD_PRELOAD Local Buffer Overflow Vulnerability Sun Solaris Web-Based Enterprise Management Insecure Default File Permissions Vulnerability Sun Solaris in.dhcpd Malformed BOOTP Packet Buffer Overflow Vulnerability Unix Shell Redirection Race Condition Vulnerability

November 9, 2004

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 1 additional vulnerability. The following table includes information about the vulnerability. Bugtraq ID
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability

November 2, 2004

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 19 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID

11471 11412

Apache mod_include Local Buffer Overflow Vulnerability Microsoft Frontpage Asycpict.DLL JPEG Handling Remote Denial of Service Vulnerabilities Microsoft Internet Explorer Font Tag Denial Of Service Vulnerability
66 Vulnerability Update Release Notes November 2, 2004
Microsoft Internet Explorer HHCtrl ActiveX Control Cross-Domain Scripting Vulnerability Microsoft Internet Explorer HTML Help Control Local Zone Security Restriction Bypass Vulnerability Microsoft Internet Explorer Malformed HTML Null Pointer Dereference Vulnerability Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerability Microsoft Internet Explorer Valid File Drag and Drop Embedded Code Vulnerability Microsoft Outlook 2003 Security Policy Bypass Vulnerability Microsoft Outlook Express Plaintext Email Security Policy Bypass Vulnerability Microsoft Windows XP WAV File Handler Denial Of Service Vulnerability Mozilla Browser Cross-Domain Dialog Box Spoofing Vulnerability Mozilla Browser Cross-Domain Tab Window Form Field Focus Vulnerability Mozilla Invalid Pointer Dereference Vulnerability Mozilla Multiple Memory Corruption Vulnerabilities Mozilla Temporary File Insecure Permissions Information Disclosure Vulnerability Opera Browser TBODY COL SPAN Memory Corruption Denial Of Service Vulnerability Opera Web Browser Cross-Domain Dialog Box Spoofing Vulnerability Sun Solaris LDAP RBAC Local Privilege Escalation Vulnerability

10708 10710

The following table includes information about the 2 updated vulnerabilities. Bugtraq Title ID
Microsoft Internet Explorer showHelp CHM File Execution Weakness Microsoft Internet Explorer CLSID File Extension Misrepresentation Vulnerability

July 6, 2004

This content update for Symantec Vulnerability Assessment 1.0 reports 1 updated vulnerability. The following tables includes information about the vulnerability. Bugtraq ID
Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness
Vulnerability Update Release Notes June 29, 2004

June 29, 2004

This content update for Symantec Vulnerability Assessment 1.0 includes an engine update release 1.0.4 and detects and reports 13 additional vulnerabilities and reports 33 updated vulnerabilities. The following tables includes information about the vulnerabilities. Bugtraq ID

10551 10292

HP-UX Local X Font Server Buffer Overflow Vulnerability Microsoft ASP.NET Malformed HTTP Request Information Disclosure Vulnerability Microsoft Internet Explorer Non-FQDN URI Address Zone Bypass Vulnerability Microsoft Internet Explorer ADODB.Stream Object File Installation Weakness Microsoft Internet Explorer HREF Save As Denial of Service Vulnerability Microsoft Internet Explorer URI Obfuscation Weakness Microsoft Internet Explorer Wildcard DNS Cross-Site Scripting Vulnerability Microsoft Office Web Components Active Script Execution Vulnerability Microsoft Office Web Components Chart Local File Existence Disclosure Vulnerability Microsoft Office Web Components Clipboard Information Disclosure Vulnerability Microsoft Office Web Components Local File Read Vulnerability Microsoft OWC DataSourceControl ConnectionFile Local File Existence Disclosure Vulnerability Microsoft OWC Spreadsheet XMLURL Local File Existence Disclosure Vulnerability

4449 4454

4453 4456
Engine Update release 1.0.4 for Symantec Vulnerability Assessment 1.0 updates the SVA Manager so that audits can be run against Windows Server 2003
82 Vulnerability Update Release Notes June 29, 2004
Agents. The following table includes information about the 33 updated Windows Server 2003 vulnerabilities. Bugtraq Title ID
9633 Microsoft ActiveX Authenticode Verification Bypass Vulnerability Microsoft ASN.1 Library Double Free Memory Corruption Vulnerability Microsoft ASN.1 Library Length Integer Mishandling Memory Corruption Vulnerability Microsoft ASN.1 Library Multiple Stack-Based Buffer Overflow Vulnerabilities Microsoft Exchange Server 2003 Outlook Web Access Lowered Security Settings Weakness Microsoft Jet Database Engine Remote Code Execution Vulnerability Microsoft ListBox/ComboBox Control User32.dll Function Buffer Overrun Vulnerability Microsoft Negotiate SSP Remote Buffer Overflow Vulnerability Microsoft RPCSS DCERPC DCOM Object Activation Packet Length Heap Corruption Vulnerability Microsoft RPCSS DCOM Interface Long Filename Heap Corruption Vulnerability Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability Microsoft Windows ASN.1 Library Bit String Processing Integer Handling Vulnerability Microsoft Windows COM Internet Service/RPC Over HTTP Remote Denial Of Service Vulnerability Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability Microsoft Windows EngTextOut Non-ASCII Character Denial Of Service Vulnerability Microsoft Windows FIN-ACK Network Device Driver Frame Padding Information Disclosure Vulnerability Microsoft Windows H.323 Remote Buffer Overflow Vulnerability Microsoft Windows Help And Support Center URI Handler Buffer Overflow Vulnerability

Business Objects Crystal Reports Web Form Viewer Directory Traversal Vulnerability Microsoft DirectX DirectPlay Remote Malformed Packet Denial Of Service Vulnerability

June 1, 2004

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 15 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq Title ID
10355 Apache Mod_SSL SSL_Util_UUEncode_Binary Stack Buffer Overflow Vulnerability Microsoft Internet Explorer Codebase Double Backslash Local Zone File Execution Weakness
Vulnerability Update Release Notes May 18, 2004
10382 Microsoft Internet Explorer CSS Style Sheet Memory Corruption Vulnerability Microsoft Internet Explorer Double Backslash CHM File Execution Weakness Microsoft Internet Explorer http-equiv Meta Tag Denial of Service Vulnerability Microsoft Internet Explorer Interface Spoofing Vulnerability Microsoft Internet Explorer XML Parsing Denial Of Service Vulnerability Multiple Mail Transfer Agent Embedded Hyperlink URI Obfuscation Variant Weakness Microsoft Outlook 2003 Media File Script Execution Vulnerability Microsoft Outlook Express URI Obfuscation Vulnerability Microsoft Outlook Mail Client E-mail Address Verification Weakness Microsoft Windows XP Self-Executing Folder Vulnerability Opera Web Browser Address Bar Spoofing Weakness Opera Web Browser Telnet URI handler Arbitrary File Creation/Modification Vulnerability Sun Solaris Management Console Information Disclosure Vulnerability

10348 10351

10337 10341

May 18, 2004

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 10 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID
AIX Getlvcb Command Line Argument Buffer Overflow Vulnerability AIX Putlvcb Command Line Argument Buffer Overflow Vulnerability Common Desktop Environment DTLogin Unspecified Remote Double Free Vulnerability Microsoft Excel Drawing Shape Hyperlink Macro Execution Vulnerability
86 Vulnerability Update Release Notes May 11, 2004

10307 4397

Microsoft Excel Embedded Object Inline Macro Execution Vulnerability Microsoft Excel XML Stylesheet Arbitrary Code Execution Vulnerability Microsoft Internet Explorer Embedded Image URI Obfuscation Weakness Microsoft Internet Explorer Unconfirmed Memory Corruption Vulnerability Microsoft Outlook 2003 Predictable File Location Weakness Microsoft Outlook HTML Mail Script Execution Vulnerability

May 11, 2004

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 1 additional vulnerability. The following table includes information about the vulnerability. Bugtraq Title ID

Vulnerability Update Release Notes December 17, 2003
IBM AIX enq Local Format String Vulnerability RPCBind / Portmap Malformed RPC Request Denial of Service Vulnerability Solaris 8 dtscreen Authentication Bypass Vulnerability Solaris AdminTool Media Installation Path Buffer Overflow Vulnerability Solaris ufsrestore Buffer Overflow Vulnerability Sun Solaris LPStat Unspecified Local Privilege Escalation Vulnerability Sun Solaris Text Editor ed Temporary File Creation Vulnerability

December 17, 2003

This content update for Symantec Vulnerability Assessment 1.0 detects and reports 41 additional vulnerabilities. The following table includes information about the vulnerabilities. Bugtraq ID
CDE DTPrintInfo Home Environment Variable Buffer Overflow Vulnerability Ethereal AFS Buffer Overflow Vulnerability Ethereal AFS Dissector Memory Corruption Vulnerability Ethereal ASN.1 String Memory Allocation Denial Of Service Vulnerability Ethereal BGP Dissector Infinite Loop Denial of Service Vulnerability Ethereal DCERPC Dissector Memory Allocation Vulnerability Ethereal DNS Dissector Infinite Loop Denial of Service Vulnerability Ethereal GIOP Dissector Memory Exhaustion Vulnerability Ethereal ISIS Dissector Memory Corruption Vulnerability Ethereal Malformed SNMP Denial of Service Vulnerability Ethereal Mount Dissector Integer Overflow Vulnerability Ethereal RSVP Dissector Memory Corruption Vulnerability Ethereal SOCKS Dissector Memory Corruption Vulnerability
102 Vulnerability Update Release Notes December 17, 2003
Ethereal TVB_GET_NSTRINGZ0() Memory Handling Vulnerability HP-UX Line Printer Daemon Buffer Overflow Vulnerability HP-UX Shar Utility Predictable Temporary File Creation Vulnerability HPUX Wall Message Buffer Overflow Vulnerability Joe Text Editor Backup SetUID Executable Editing Permission Elevation Vulnerability Microsoft FrontPage/IIS Cross Site Scripting shtml.dll Vulnerability Microsoft Internet Explorer Unspecified Remote Compromise Vulnerability Microsoft Windows 2000 SMTP Improper Authentication Vulnerability Microsoft Windows SMTP Service Authorization Bypass Vulnerability Mozilla Browser Large HTTP Header Buffer Overflow Vulnerability Mozilla document.open() Memory Corruption Denial of Service Vulnerability Mozilla Netscape Navigator Plug-In Path Disclosure Vulnerability Mozilla OnUnload Referer Information Leakage Vulnerability Mozilla Predictable Temporary File Symbolic Link Attack Vulnerability Mozilla XMLSerializer Same Origin Policy Violation Vulnerability Multiple Browser URI Display Obfuscation Weakness Multiple Ethereal Protocol Dissector Vulnerabilities Multiple Sniffer Vendor DNS Decode Vulnerability Multiple Vendor IKE Implementation Certificate Authenticity Verification Vulnerability Opera Content-Type HTML File Execution Vulnerability Opera Web Browser Opera. URI Handler Directory Traversal Vulnerability Solaris cachefsd Buffer Overrun Vulnerability Solaris cachefsd Denial of Service Vulnerability Solaris ftpd glob() Expansion LIST Heap Overflow Vulnerability Solaris in.ftpd Remote Denial of Service Vulnerability Solaris lpd Remote Command Execution Vulnerability

7604 4583

7731 7734

1978 2046

Vulnerability Update Release Notes July 15, 2003

3670 1394

Microsoft Internet Explorer About: URL Zone Spoofing Vulnerability Microsoft Internet Explorer and Outlook/Outlook Express Remote File Write Vulnerability Microsoft Internet Explorer Arbitrary HTML File Execution Vulnerability Microsoft Internet Explorer Cascading Style Sheet File Disclosure Vulnerability Microsoft Internet Explorer Classic Mode FTP Client Cross Domain Scripting Vulnerability Microsoft Internet Explorer CLASSID Denial of Service Vulnerability Microsoft Internet Explorer CLASSID Variant Denial Of Service Vulnerability Microsoft Internet Explorer Content-Type Field Arbitrary File Execution Vulnerability Microsoft Internet Explorer Cookie Content Disclosure Vulnerability Microsoft Internet Explorer CSSText Bold Font Denial Of Service Vulnerability Microsoft Internet Explorer Custom HTTP Error HTML Injection Vulnerability Microsoft Internet Explorer DHTML AnchorClick Partial Denial Of Service Vulnerability Microsoft Internet Explorer Dialog Box Cross-Domain Violation Vulnerability Microsoft Internet Explorer Directory Disclosure Vulnerability Microsoft Internet Explorer Document.Write() Zone Bypass Vulnerability Microsoft Internet Explorer DYNSRC File Information Disclosure Vulnerability Microsoft Internet Explorer False URL Information Vulnerability Microsoft Internet Explorer File Attachment Script Execution Vulnerability Microsoft Internet Explorer File Contents Disclosure Vulnerability Microsoft Internet Explorer File Disclosure Vulnerability Microsoft Internet Explorer Form Denial of Service Vulnerability

3116 4411

5094 7384

4754 5027

7763 5450
120 Vulnerability Update Release Notes July 15, 2003
Microsoft Internet Explorer GetObject File Disclosure Vulnerability Microsoft Internet Explorer History List Script Injection Vulnerability Microsoft Internet Explorer 'INPUT TYPE=FILE' Vulnerability Microsoft Internet Explorer JavaScript Desktop Spoofing Vulnerability Microsoft Internet Explorer Known Local File Script Execution Vulnerability Microsoft Internet Explorer Malformed JavaScript Denial of Service Vulnerability Microsoft Internet Explorer MIME Type File Extension Spoofing Vulnerability Microsoft Internet Explorer Modeless Dialog DoS Vulnerability Microsoft Internet Explorer 'mstask.exe' CPU Consumption Vulnerability Microsoft Internet Explorer MSXML XML File Parsing Cross-Site Scripting Vulnerability Microsoft Internet Explorer Navigate Function Cross Frame Access Vulnerability Microsoft Internet Explorer Password Character Determination Vulnerability Microsoft Internet Explorer Plugin.OCX EnableFullPage Input Validation Vulnerability Microsoft Internet Explorer Plugin.OCX Load() Method Buffer Overflow Vulnerability Microsoft Internet Explorer PNG Deflate Heap Corruption Vulnerability Microsoft Internet Explorer Refresh Denial of Service Vulnerability Microsoft Internet Explorer Remote File Viewing Vulnerability Microsoft Internet Explorer Scriptlet Rendering Vulnerability Microsoft Internet Explorer Self Executing HTML File Vulnerability Microsoft Internet Explorer ShowHelp Arbitrary Command Execution Vulnerability Microsoft Internet Explorer SSL Certificate Expiration Vulnerability

6961 6780

Microsoft Internet Explorer Unicode Character Handling DoS Vulnerability Microsoft Internet Explorer URI Handler Restriction Circumvention Vulnerability Microsoft Internet Explorer XML Datasource Applet File Disclosure Vulnerability Microsoft Internet Explorer Zone Spoofing Vulnerability Microsoft Internet Explorer/Outlook Express XBM Handling DoS Vulnerability Microsoft Internet Information Service Multiple Vulnerabilities Microsoft VBScript ActiveX Word Object Denial Of Service Vulnerability Microsoft VBScript Same Origin Policy Violation Vulnerability Microsoft Windows 2000/XP/2003 IPV6 ICMP Flood Denial Of Service Vulnerability Microsoft Windows Media Services Logging ISAPI Buffer Overflow Vulnerability Microsoft Windows XP Nested Directory Denial of Service Vulnerability Multiple Browser Vendor Same Origin Policy Design Error Vulnerability Multiple Microsoft Internet Explorer Cached Objects Zone Bypass Vulnerability Multiple Vendor Image Count Denial of Service Vulnerability Multiple Vendor IMG Tag DoS Vulnerability Multiple Vendor JavaScript Interpreter Denial Of Service Vulnerability OpenSSH Reverse DNS Lookup Access Control Bypass Vulnerability OpenSSL ASN.1 Parsing Error Denial Of Service Vulnerability Sendmail Insecure Temporary File Privilege Escalation Vulnerability

3420 4653

4158 7788

5366 7614

122 Vulnerability Update Release Notes July 15, 2003