HTTP: Symantec NAVOPTS.DLL ActiveX Control

This signature detects attempts to exploit a known vulnerability in Norton Antivirus and Norton SystemWorks. Attackers can create Web pages containing dangerous ActiveX controls, which if accessed by a victim, can allow the attacker to gain control of the client system.

Extended Description

Symantec Norton Antivirus ActiveX control is prone to a remote code-execution vulnerability. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful exploits will allow attackers to execute arbitrary code in the context of the user visiting a malicious web page. Failed exploit attempts will likely result in denial-of-service conditions.

Affected Products

Symantec norton_internet_security_2006

References

BugTraq: 23822

CVE: CVE-2006-3456

URL: https://alerts.symantec.com/loaddocument.aspx?GUID=249769c9-c7f3-4a5e-b8cb-dab6c9980970

Short Name

HTTP:STC:CLSID:ACTIVEX:NAVOPTS

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Symantec NAVOPTS.DLL ActiveX Control

Extended Description

Affected Products

References

Found a potential security threat?