VULNERABILITY INTELLIGENCE

CVE-2005-2758

CVSS score10 HIGH
EPSS probability13.44%
CISA KEVNot currently listed
Published2005-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.

Primary references