CVE-2005-2758: symantec antivirus_scan_engine

EPSS trend

Probability

13.44%

Chance of exploitation in the next 30 days

Percentile

96%

Versus all other CVEs

30-day change

0.00 pp

From 13.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

13.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

10 links

exchange.xforce.ibmcloud.com/vulnerabilities/22519VDB EntryX Refsource XF
www.idefense.com/application/poi/display?id=314&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
www.securityfocus.com/bid/15001VDB EntryX Refsource BID
www.kb.cert.org/vuls/id/849209Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.osvdb.org/19854VDB EntryX Refsource OSVDB
www.vupen.com/english/advisories/2005/1954VDB EntryX Refsource VUPEN
secunia.com/advisories/17049Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015001VDB EntryX Refsource SECTRACK
www.symantec.com/avcenter/security/Content/2005.10.04.htmlX Refsource CONFIRMPatchVendor Advisory
securityreason.com/securityalert/48Third Party AdvisoryX Refsource SREASON

Related vulnerabilities

CVE-2007-0447symantecantivirus_scan_engine+115.96%19y ago05-10-2007 21:00Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives.CVE-2007-3699symantecantivirus_scan_engine+113.91%19y ago05-10-2007 21:00The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.CVE-2005-1346symantecantivirus_scan_engine+61.49%21y ago28-04-2005 04:00Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote attackers to cause a denial of service (component crash) and avoid detection via a crafted RAR file.CVE-2005-0249symantecantivirus_scan_engine+1018.83%21y ago08-02-2005 05:00Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.CVE-2004-0217symantecantivirus_scan_engine0.46%22y ago16-03-2004 05:00The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.CVE-2006-0232symantecantivirus_scan_engine2.46%20y ago25-04-2006 01:00Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

All vulnerabilities inantivirus_scan_engine antivirus_scan_engine_for_network_attached_storage

CVE-2005-2758: symantec antivirus_scan_engine

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References