CVE-2005-0249
Estado: ModificadaAlta (7.5)—
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 19%
- Percentil entre todas las CVEs puntuadas: 97
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
Symantec — Antivirus Scan EngineSymantec — Brightmail AntispamSymantec — Client SecuritySymantec — Gateway SecuritySymantec — Mail SecuritySymantec — Norton AntivirusSymantec — Norton Internet SecuritySymantec — Norton System WorksSymantec — SAV Filter Domino NT PortsSymantec — SAV Filter FOR Domino NTSymantec — WEB Security
CWE
- NVD-CWE-Other
Referencias
- http://securitytracker.com/id?1013133
- http://www.kb.cert.org/vuls/id/107822
- http://www.symantec.com/avcenter/security/Content/2005.02.08.html
- http://xforce.iss.net/xforce/alerts/id/187
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18869
- http://securitytracker.com/id?1013133
- http://www.kb.cert.org/vuls/id/107822
- http://www.symantec.com/avcenter/security/Content/2005.02.08.html
- http://xforce.iss.net/xforce/alerts/id/187
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18869
JSON original (NVD)
Mostrar
{
"id": "CVE-2005-0249",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": true,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2005-02-08T05:00:00.000",
"references": [
{
"url": "http://securitytracker.com/id?1013133",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.kb.cert.org/vuls/id/107822",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2005.02.08.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://xforce.iss.net/xforce/alerts/id/187",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18869",
"tags": [
"VDB Entry"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1013133",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.kb.cert.org/vuls/id/107822",
"tags": [
"Patch",
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.symantec.com/avcenter/security/Content/2005.02.08.html",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://xforce.iss.net/xforce/alerts/id/187",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18869",
"tags": [
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header."
}
],
"lastModified": "2026-06-16T22:10:46.627",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:antivirus_scan_engine:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5797D88E-6D89-46F9-AC32-154754D6B856",
"versionEndExcluding": "4.3.3"
},
{
"criteria": "cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95436CD6-8E9C-4F89-9683-0650F6167027"
},
{
"criteria": "cpe:2.3:a:symantec:brightmail_antispam:5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC910CFD-9F20-473E-BC2D-64A7A3C14404"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE15AE1D-8647-444F-90F0-FC658A3AC344"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C03FA86-F2E6-4E41-8368-E917C91D7837"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "95BF74F0-40F1-4395-AC85-E6B566950C53"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "994CB184-AFE8-4673-ACE8-085813F1E71F"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85CF6FFB-4189-4558-A70D-DE6D4C0C1F82"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.464:mr7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "31D6A148-A92C-4FCA-8762-16764D62C363"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.471:mr8:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E6E2EA2-88DA-4DF0-9AA3-3E3D2C80C04E"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1.1_mr1_build_8.1.1.314a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB47C16B-5221-4D64-BDB2-65D072A66C02"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1.1_mr2_build_8.1.1.319:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "204F2046-F116-45D7-9256-179A3B59886A"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1.1_mr3_build_8.1.1.323:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD0C67C0-3CF1-4BAD-A673-9B783E1D0724"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1.1_mr4_build_8.1.1.329:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "274EA5DA-9519-46DE-B11E-87BDF1978E14"
},
{
"criteria": "cpe:2.3:a:symantec:client_security:1.1.1_mr5_build_8.1.1.336:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "044C020A-0BCC-4037-BC32-73385A0BE019"
},
{
"criteria": "cpe:2.3:a:symantec:gateway_security:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A939A3CE-BFBB-4950-A0D3-D5731AABF602"
},
{
"criteria": "cpe:2.3:a:symantec:gateway_security:2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BC7324C-0415-4349-A625-04A8209D7709"
},
{
"criteria": "cpe:2.3:a:symantec:gateway_security:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "031C9545-1CF1-46EF-B79C-7AD69E1B1C82"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA6CFDFD-1EB4-458A-AD39-320E619593D9"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:4.1:build_458:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "15436586-B0EE-40F4-9051-90953CF3684D"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:4.1:build_459:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96290C64-A507-46B6-908D-AD567A21899F"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:4.1:build_461:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2955A350-222F-4AD9-9745-9468D46503F5"
},
{
"criteria": "cpe:2.3:a:symantec:mail_security:4.5_build_719:*:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CA62889-7A55-459F-BFD8-D38CD93F9219"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:2.18_build_83:*:exchange:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E906A81-4081-438E-948C-FC82BF7203F0"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.1.1.319:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E626F14C-FDE9-4C6A-8CE7-B99CD4FEE485"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.1.1.323:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC4CFE5A-4D51-405D-B92E-37DE4E617ABE"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.1.1.329:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "727A116A-D18C-4F3F-A6A8-2C6107FFB8C0"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.1.1_build8.1.1.314a:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A6612F1-4CA8-427A-AED4-854F943BA3D8"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.434:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8BB225A0-7FB9-4AD2-8ED2-5CC1AEBAAB3C"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.437:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9603C423-F24A-4607-B721-D02EDA94AE8D"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.446:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "574AAAA6-8181-457B-84CE-5AEB1895E3B6"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.457:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF957AD3-B6E5-4BD7-832F-33E734817B77"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.460:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "14D862F4-BE5F-4E6B-9955-ACFB48A5D3B1"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.464:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "768B7F5E-E4AD-420E-92FA-A58E1AE3D1BC"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:8.01.471:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C15B7FEA-E6A9-4DBE-B1A9-E17E91512A77"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:9.0:*:macintosh_corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DFD3D01C-9169-4CFE-9EA0-61D32BFA8943"
},
{
"criteria": "cpe:2.3:a:symantec:norton_antivirus:2004:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7FC3B67-D36C-4C9F-B5DC-8FBE3D6E9E29"
},
{
"criteria": "cpe:2.3:a:symantec:norton_internet_security:2004:*:professional:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09CA1AC8-E273-44C1-9D1C-19542EB57433"
},
{
"criteria": "cpe:2.3:a:symantec:norton_system_works:2004:*:windows:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "676BCD67-231B-409B-AE6B-D00314C30C9B"
},
{
"criteria": "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:aix:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "20030FF8-7275-4AFB-A051-C78F3D3990D7"
},
{
"criteria": "cpe:2.3:a:symantec:sav_filter_domino_nt_ports:build3.0.5:*:os_400:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CD83506-91E9-4556-A993-8FDD31FBDF24"
},
{
"criteria": "cpe:2.3:a:symantec:sav_filter_for_domino_nt:3.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4004DB50-022B-48C9-B9E5-5110DF37A0B1"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.59:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B05B8522-E203-49A0-8C5B-3DA7B06AF5AF"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.60:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FD064CE-3C39-4243-B59E-CC8E48ED50DB"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.61:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9886B467-793C-4D07-9B1B-B80FA5266D29"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "676F5A96-B21B-49FF-86EA-F18F9C3931C9"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.63:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18991132-C5B6-43AB-BDCB-196BB2957F27"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.67:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42CE2596-83A9-4A80-A8C6-825EDEAAB8B3"
},
{
"criteria": "cpe:2.3:a:symantec:web_security:3.01.68:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CBA16BAF-6263-44EA-B3EB-187264913D8D"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}