The Threat Explorer is a comprehensive resource consumers can turn to for daily, accurate, up-to-date information on the latest threats, risks and vulnerabilities.

Vulnerabilities

Vulnerabilities are flaws in computer software that create weaknesses in the overall security of the system or network.

Advisories relating to Symantec products may be viewed here.

Name	Discovered

Microsoft XML Core Services Transfer Encoding Cross Domain Information Disclo...	November 11, 2008
Adobe Reader 'util.printf()' JavaScript Function Stack Buffer Overflow Vulner...	November 4, 2008
Microsoft Windows Server Service RPC Handling Remote Code Execution Vulnerabi...	October 23, 2008
Microsoft Excel BIFF File Format Parsing Remote Code Execution Vulnerability	October 14, 2008
Microsoft Host Integration Server RPC Remote Code Execution Vulnerability	October 14, 2008
Microsoft Internet Explorer HTML Objects Uninitialized Memory Corruption Vuln...	October 14, 2008
Microsoft Windows Media Encoder 9 'wmex.dll' ActiveX Control Remote Buffer Ov...	September 9, 2008
Microsoft GDI+ VML Heap-Based Buffer Overflow Vulnerability	September 9, 2008
Microsoft Windows Media Player SSPL File Sample Rate Remote Code-Execution Vu...	September 9, 2008
Microsoft Excel Indexing Validation Remote Code Execution Vulnerability	August 12, 2008
Microsoft Outlook Express And Windows Mail MHTML Handler Information Disclosu...	August 12, 2008
Microsoft Windows Messenger ActiveX Control Information Disclosure Vulnerability	August 12, 2008
Multiple Vendor DNS Protocol Insufficient Transaction ID Randomization DNS Sp...	July 23, 2008
Microsoft Word Unspecified Remote Code Execution Vulnerability	July 9, 2008
Microsoft Windows Explorer saved-search File Remote Code Execution Vulnerability	July 8, 2008
Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download ...	July 7, 2008
Microsoft DirectX SAMI File Parsing Stack Buffer Overflow Vulnerability	June 10, 2008
Microsoft Internet Explorer HTML Objects 'substringData()' Remote Code Execut...	June 10, 2008
Microsoft Windows Bluetooth Stack Remote Code Execution Vulnerability	June 10, 2008
Microsoft Word RTF Malformed String Handling Memory Corruption Remote Code Ex...	May 13, 2008
Microsoft Jet DataBase Engine MDB File Parsing Remote Buffer Overflow Vulnera...	May 13, 2008
Microsoft Project Resource Memory Allocation Remote Code Execution Vulnerability	April 8, 2008
Microsoft Internet Explorer Data Stream Handling Remote Code Execution Vulner...	April 8, 2008
Microsoft VBScript and JScript Scripting Engines Remote Code Execution Vulner...	April 8, 2008
Microsoft Excel Conditional Formatting Values Remote Code Execution Vulnerabi...	March 11, 2008
Microsoft Office File Memory Corruption Vulnerability	March 11, 2008
Microsoft Excel Data Validation Record Remote Code Execution Vulnerability	March 11, 2008
Adobe Acrobat and Reader Multiple Arbitrary Code Execution and Security Vulne...	February 12, 2008
Microsoft Word Unspecified Memory Corruption Remote Code Execution Vulnerability	February 12, 2008
Microsoft Windows Vista DHCP Remote Denial Of Service Vulnerability	February 12, 2008
Microsoft Visual FoxPro FPOLE.OCX ActiveX Control Arbitrary Command Execution...	February 12, 2008
Microsoft Excel Header Parsing Remote Code Execution Vulnerability	January 16, 2008
Microsoft Windows TCP/IP IGMP MLD Remote Code Execution Vulnerability	January 8, 2008
Microsoft DirectX WAV and AVI File Parsing Remote Code Execution Vulnerability	December 11, 2007
Microsoft Windows Media Format Runtime ASF File Remote Code Execution Vulnera...	December 11, 2007
Apple QuickTime RTSP Response Header Content-Length Remote Buffer Overflow Vu...	November 25, 2007
Xunlei Thunder PPLAYER.DLL_1_WORK ActiveX Control Buffer Overflow Vulnerability	November 25, 2007
Microsoft Windows URI Handler Command Execution Vulnerability	November 13, 2007
Microsoft Windows Recursive DNS Spoofing Vulnerability	November 13, 2007
RealPlayer ierpplug.dll ActiveX Control Playlist Name Stack Buffer Overflow V...	October 22, 2007
Microsoft Internet Explorer Script Error Handling Memory Corruption Vulnerabi...	October 9, 2007
Microsoft Windows Kodak Image Viewer Remote Code Execution Vulnerability	October 9, 2007
Microsoft Word Workspace Memory Corruption Remote Code Execution Vulnerability	October 9, 2007
Adobe Acrobat Mailto PDF File Command Execution Vulnerability	September 20, 2007
BaoFeng Storm MPS.DLL ActiveX Control Multiple Remote Buffer Overflow Vulnera...	September 13, 2007
Microsoft Agent agentdpv.dll ActiveX Control Malformed URL Stack Buffer Overf...	September 11, 2007
Microsoft MSN Messenger Video Conversation Buffer Overflow Vulnerability	September 11, 2007
Trend Micro ServerProtect SPNTSVC.EXE Multiple Stack Buffer Overflow Vulnerab...	August 24, 2007
Microsoft Internet Explorer Vector Markup Language VGX.DLL Remote Buffer Over...	August 14, 2007
Microsoft XML Core Services Remote Code Execution Vulnerability	August 14, 2007
Microsoft Excel Worksheet Index Value Remote Code Execution Vulnerability	August 14, 2007
Microsoft Excel Workspace Designation Remote Code Execution Vulnerability	July 10, 2007
Microsoft Office Publisher Invalid Memory Reference Remote Code Execution Vul...	July 10, 2007
Microsoft Excel Worksheet Remote Code Execution Vulnerability	July 10, 2007
Microsoft Internet Explorer URLMON.DLL COM Object Instantiation Remote Code E...	June 12, 2007
Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability	June 12, 2007
Microsoft Word RTF Parsing Remote Code Execution Vulnerability	May 8, 2007
Microsoft Word Array Remote Code Execution Vulnerability	May 8, 2007
Microsoft Internet Explorer Property Method Remote Code Execution Vulnerability	May 8, 2007
Microsoft Agent URI Processing Remote Code Execution Vulnerability	April 10, 2007
Microsoft Windows Csrss HardError Messages Multiple Vulnerabilities	April 10, 2007
Microsoft Windows Cursor And Icon ANI Format Handling Remote Code Execution V...	March 29, 2007
Microsoft Word Malformed Drawing Object Arbitrary Code Execution Vulnerability	February 13, 2007
Microsoft MFC Embedded OLE Object Remote Code Execution Vulnerability	February 13, 2007
Microsoft Excel Opcode Handling Unspecified Remote Code Execution Vulnerability	January 9, 2007
Microsoft Windows Vector Markup Language Buffer Overrun Vulnerability	January 9, 2007
Microsoft Internet Explorer DHTML Script Function Remote Code Execution Vulne...	December 12, 2006
Windows Media Player Remote ASF File Buffer Overflow Vulnerability	December 12, 2006
Windows Media Player ASX PlayList File Heap Overflow Vulnerability	December 12, 2006
Microsoft XML Core Service XMLHTTP ActiveX Control Remote Code Execution Vuln...	November 14, 2006
Microsoft Word Mail Merge Remote Code Execution Vulnerability	October 10, 2006
Microsoft Excel Lotus 1-2-3 File Handling Remote Code Execution Vulnerability	October 10, 2006
Microsoft Excel DATETIME Remote Code Execution Vulnerability	October 10, 2006
Microsoft Office Smart Tag Remote Code Execution Vulnerability	October 10, 2006
Microsoft Internet Explorer Vector Markup Language Buffer Overflow Vulnerability	September 19, 2006
Microsoft Publisher Font Parsing Remote Code Execution Vulnerability	September 12, 2006
Microsoft Windows Server Service Remote Buffer Overflow Vulnerability	August 8, 2006
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerabi...	August 8, 2006
Microsoft Internet Explorer Chained Cascading Style Sheets Remote Code Execut...	August 8, 2006
Microsoft Internet Explorer HTML Layout and Positioning Remote Code Execution...	August 8, 2006
Microsoft Windows MHTML URI Buffer Overflow Vulnerability	August 8, 2006
Microsoft Windows DHCP Client Service Remote Code Execution Vulnerability	July 11, 2006
Microsoft Windows Server Driver Mailslot Remote Heap Buffer Overflow Vulnerab...	July 11, 2006
Microsoft Windows Malformed ART Image Remote Code Execution Vulnerability	June 13, 2006
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerabi...	June 13, 2006
Microsoft Windows GDI WMF Handling Heap Overflow Vulnerability	June 13, 2006
Symantec Client Security and Symantec AntiVirus Elevation of Privilege	May 25, 2006
Microsoft Exchange Server Calendar Remote Code Execution Vulnerability	May 9, 2006
Microsoft MDAC RDS.Dataspace ActiveX Control Remote Code Execution Vulnerability	April 11, 2006
Microsoft Internet Explorer CreateTextRange Remote Code Execution Vulnerability	March 28, 2006
Microsoft Excel Malformed Range Memory Corruption Vulnerability	March 14, 2006
Apple Mac OS X Archive Metadata Command Execution Vulnerability	February 22, 2006
Microsoft Windows Media Player Bitmap Handling Buffer Overflow Vulnerability	February 14, 2006
Microsoft Internet Explorer WMF Image Parsing Memory Corruption Vulnerability	February 14, 2006
Microsoft Outlook / Microsoft Exchange TNEF Decoding Remote Code Execution Vu...	January 10, 2006
Microsoft Windows Embedded Web Font Buffer Overflow Vulnerability	January 10, 2006
Microsoft Windows Graphics Rendering Engine WMF SetAbortProc Code Execution V...	January 3, 2006
Microsoft Internet Explorer JavaScript OnLoad Handler Remote Code Execution V...	December 13, 2005
Cisco IPSec Unspecified IKE Traffic Denial Of Service Vulnerabilities	November 14, 2005
Microsoft Windows Graphics Rendering Engine WMF/EMF Format Code Execution Vul...	November 8, 2005
Microsoft Windows Explorer Web View Script Injection Vulnerability	October 11, 2005
Microsoft DirectX DirectShow AVI Processing Buffer Overflow Vulnerability	October 11, 2005
Cisco IOS Firewall Authentication Proxy Buffer Overflow Vulnerability	September 7, 2005
VERITAS Backup Exec for Windows Servers, VERITAS Backup Exec for NetWare Serv...	August 12, 2005
Microsoft Windows Print Spooler Buffer Overflow Vulnerability	August 9, 2005
Microsoft Windows Plug and Play Buffer Overflow Vulnerability	August 9, 2005
Microsoft Internet Explorer Web Folder Behaviors Cross-Domain Scripting Vulne...	August 9, 2005
Microsoft Windows Color Management Module ICC Profile Buffer Overflow Vulnera...	July 12, 2005
Microsoft Internet Explorer Javaprxy.DLL COM Object Instantiation Heap Overfl...	July 12, 2005
Microsoft Windows HTML Help Remote Code Execution Vulnerability	June 14, 2005
Microsoft Incoming SMB Packet Validation Remote Buffer Overflow Vulnerability	June 14, 2005
Microsoft Internet Explorer PNG Image Rendering Buffer Overflow Vulnerability	June 14, 2005
Microsoft Windows Shell Remote Code Execution Vulnerability	April 12, 2005
Microsoft Exchange Server SMTP Extended Verb Buffer Overflow Vulnerability	April 12, 2005
Microsoft Windows Internet Protocol Validation Remote Code Execution Vulnerab...	April 12, 2005
Microsoft MSN Messenger GIF Image Processing Remote Buffer Overflow Vulnerabi...	April 12, 2005
Microsoft Office XP HTML Link Processing Remote Buffer Overflow Vulnerability	February 8, 2005
Microsoft Windows Media Player Remote PNG Image Format Buffer Overflow Vulner...	February 8, 2005
Microsoft Windows Server Message Block Handlers Remote Code Execution Vulnera...	February 8, 2005
Apple ITunes Playlist Buffer Overflow Vulnerability	January 11, 2005
Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability	January 11, 2005
Microsoft Windows LoadImage API Function Integer Overflow Vulnerability	January 11, 2005
Microsoft Windows DHCP Server Remote Buffer Overflow Vulnerability	December 14, 2004
Microsoft Internet Explorer Malformed IFRAME Remote Buffer Overflow Vulnerabi...	December 01, 2004
Microsoft ISA and Proxy Server Web Site Spoofing Vulnerability	November 09, 2004
Microsoft Windows Program Group Converter Filename Local Buffer Overrun Vulne...	October 12, 2004
Microsoft Windows Compressed (zipped) Folder Buffer Overflow Vulnerability	October 12, 2004
Microsoft GDI+ Library JPEG Segment Length Integer Underflow Vulnerability	September 14, 2004
Microsoft Exchange Outlook Web Access Script Injection Vulnerability	August 10, 2004
Microsoft DirectX DirectPlay Remote Malformed Packet Denial Of Service Vulner...	June 8, 2004
Microsoft Windows HSC DVD Driver Upgrade Code Execution Vulnerability	May 11, 2004
Multiple Vendor TCP Sequence Number Approximation Vulnerability	April 20, 2004
Summary of Symantec Safeguard Protection for Microsoft Security Bulletins for...	April 16, 2004
Microsoft Windows LSASS Buffer Overrun Vulnerability	April 13, 2004
Outlook Express MHTML Forced File Execution Vulnerability	April 13, 2004
Microsoft Windows Private Communications Transport Protocol Buffer Overrun Vu...	April 13, 2004
Microsoft Windows WMF/EMF Image Formats Remote Buffer Overflow Vulnerability	April 13, 2004
Microsoft MSN Messenger Information Disclosure Vulnerability	March 9, 2004
Microsoft Outlook Mailto Parameter Quoting Zone Bypass Vulnerability	March 9, 2004
Microsoft Windows Media Services Remote Denial of Service Vulnerability	March 9, 2004
Microsoft Windows ASN.1 Library Integer Handling Vulnerability	February 10, 2004
Microsoft Windows Internet Naming Service Buffer Overflow Vulnerability	February 10, 2004
Microsoft ISA Server 2000 H.323 Filter Remote Buffer Overflow Vulnerability	January 13, 2004
Microsoft MDAC Function Broadcast Response Buffer Overrun Vulnerability	January 13, 2004
Linux Kernel do_mremap Function Boundary Condition Vulnerability	January 5, 2004
Openwares.org Internet Explorer Patch Buffer Overflow Vulnerability	December 23, 2003
RSync Daemon Mode Undisclosed Remote Heap Overflow Vulnerability	December 9, 2003
Yahoo! Messenger YAuto.DLL Open Buffer Overflow Vulnerability	December 9, 2003
Microsoft Windows Workstation Service Remote Buffer Overflow Vulnerability	November 11, 2003
Microsoft Internet Explorer Self Executing HTML Arbitrary Code Execution Vuln...	November 10, 2003
Atrium Software Mercur Mailserver POP3 AUTH Remote Buffer Overflow Vulnerability	November 3, 2003
Microsoft Messenger Service Buffer Overrun Vulnerability	October 16, 2003
Microsoft Exchange Server Buffer Overflow Vulnerability	October 16, 2003
Microsoft Windows RPCSS Multi-thread Race Condition Vulnerability	October 13, 2003
OpenSSL ASN.1 Parsing Vulnerabilities	October 6, 2003
Sun Solaris SAdmin Client Credentials Remote Administrative Access	September 16, 2003
Multiple Microsoft RPC DCOM Subsystem Vulnerabilities	September 10, 2003
Pam_SMB Remote Buffer Overflow Vulnerability	September 2, 2003
Microsoft Data Access Components ODBC Buffer Overflow Vulnerability	August 26, 2003
Multiple Oracle XDB FTP / HTTP Services Buffer Overflow Vulnerabilities	August 11, 2003
Microsoft Windows DCOM RPC Interface Buffer Overrun Vulnerability	July 16, 2003
Cisco IOS Malicious IPV4 Packet Sequence Denial Of Service Vulnerability	July 16, 2003
University of Minnesota Gopherd GSisText Buffer Overflow Vulnerability	July 14, 2003
CCBill WhereAmI.CGI Remote Arbitrary Command Execution Vulnerability	July 3, 2003
InterSystems Cache Insecure Default Permissions Vulnerability	July 1, 2003
Microsoft Windows Media Services NSIISlog.DLL Remote Buffer Overflow Vulnerab...	June 25, 2003
Symantec Security Check ActiveX Buffer Overflow	June 25, 2003
Multiple Sun Database Functions Buffer Overflow Vulnerabilities	June 23, 2003
PMachine Lib.Inc.PHP Remote Include Command Execution Vulnerability	June 16, 2003
Sun Management Center Change Manager PamVerifier Buffer Overflow Vulnerability	June 2, 2003
FastTrack P2P Supernode Packet Handler Buffer Overflow Vulnerability	May 27, 2003
IBM AIX Multiple Unspecified Security Vulnerabilities	May 19, 2003
Internet Explorer file:// Request Zone Bypass Vulnerability	May 12, 2003
Apache Mod_Auth_Any Remote Command Execution Vulnerability	May 5, 2003
Cisco CatOS Authentication Bypass Vulnerability	April 28, 2003
Snort TCP Packet Reassembly Integer Overflow Vulnerability	April 21, 2003
Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability	April 14, 2003
Samba Multiple Unspecified Remote Buffer Overflow Vulnerabilities	April 7, 2003
Sendmail Address Prescan Memory Corruption Vulnerability	March 31, 2003
Sun XDR Library xdrmem_getbytes() Integer Overflow Vulnerability	March 24, 2003
Microsoft Windows 2000 WebDAV / ntdll.dll Buffer Overflow Vulnerability	March 17, 2003
Samba SMB/CIFS Packet Assembling Buffer Overflow Vulnerability	March 17, 2003
Sendmail Header Processing Buffer Overflow Vulnerability	March 3, 2003
Cisco IOS OSPF Neighbor Buffer Overflow Vulnerability	February 26, 2003
IBM Lotus Domino HTTP Redirect Buffer Overflow Vulnerability	February 18, 2003
Opera Cross Domain Scripting Vulnerability	February 10, 2003
Microsoft Windows Locator Service Buffer Overflow Vulnerability	January 27, 2003
ISC DHCPD NSUPDATE MiniRes Library Remote Buffer Overflow Vulnerabilities	January 21, 2003
Half-Life Client Server Message Format String Vulnerability	January 20, 2003
Longshine Wireless Access Point Devices Information Disclosure Vulnerability	January 13, 2003
Perl-HTTPd File Disclosure Vulnerability	January 6, 2003
Microsoft Internet Explorer PNG Deflate Heap Corruption Vulnerability	December 16, 2002
Cobalt RaQ4 Administrative Interface Command Execution Vulnerability	December 9, 2002
Lib CGI Include Buffer Overflow Vulnerability	December 2, 2002
Microsoft Data Access Components RDS Buffer Overflow Vulnerability	November 20, 2002
TCPDump / LIBPCap Trojan Horse Vulnerability	November 18, 2002
Macromedia JRun Oversized URI Buffer Overflow Vulnerability	November 11, 2002
Multiple Microsoft IIS Vulnerabilities	November 4, 2002
Multiple Vendor kadmind Remote Buffer Overflow Vulnerability	October 28, 2002
Linux-HA Heartbeat Remote Buffer Overflow Vulnerability	October 21, 2002
Sendmail Trojan Horse Vulnerability	October 14, 2002
Multiple Microsoft SQL Server Vulnerabilities	October 7, 2002
Multiple OpenVMS WASD HTTP Server Vulnerabilities	September 30, 2002
Microsoft Virtual Machine Multiple JDBC Vulnerabilities	September 23, 2002
Apache_mod_ssl Worm Alert	September 13, 2002
Multiple Cisco VPN 3000 Vulnerabilities	September 9, 2002
Microsoft Terminal Services Advanced Client buffer overflow allows malicious ...	September 3, 2002
Microsoft File Transfer Manager ActiveX Control Buffer Overflow	August 28, 2002
Microsoft Content Management Server flaws allow system compromise	August 19, 2002
Microsoft SQL Server MDAC Buffer Overflow Compromise	August 11, 2002
Microsoft SQL Server Resolution Service buffer overflows allow arbitrary code...	August 5, 2002
PHP multipart/form-data POST parsing error allows arbitrary code	July 22, 2002
Sun ONE (iPlanet) Web Server search buffer overflow allows arbitrary code	July 15, 2002
OpenSSH daemon challenge-response allows DoS or remote compromise	July 9, 2002
Apache HTTP Server chunk encoding stack overflow	June 18, 2002
Microsoft IIS HTR Chunked Encoding heap overflow allows arbitrary code	June 17, 2002
Microsoft Windows RAS phonebook buffer overflow allows code execution	June 17, 2002
ISC Bind 9.x vulnerability allows Domain Name Server Denial-of-Service	June 6, 2002
Sun Solaris SNMP components allows remote execution of code with root access	June 4, 2002
Microsoft Exchange Server 2000 Store Service allows DoS	June 3, 2002
RedHat sharutils package uudecode flaw allows elevated privileges	May 20, 2002
MSN Chat Control buffer overflow allows remote code execution	May 9, 2002
Sun Solaris admintool buffer overflow in PRODVERS argument allows root access	May 6, 2002
Multiple Vulnerabilities Discovered In Microsoft Internet Information Services	April 11, 2002
CiscoSecure ACS flaw allows arbitrary code execution	April 4, 2002
Microsoft SQL Server Extended Procedure Function Buffer Overflow	March 28, 2002
Zlib compression library double free bug could allow arbitrary code	March 11, 2002
Microsoft Virtual Machine multiple flaws allow malicious control	March 4, 2002
Multiple Buffer Overflows in PHP allow remote access to server	February 28, 2002
Microsoft Commerce Server 2000 Unchecked Buffer in AuthFilter	February 21, 2002
Multiple SNMP vulnerabilities in multiple products	February 13, 2002
ISS BlackICE ping flood buffer overflow allows code execution	February 4, 2002
CDE dtspcd Buffer Overflow	January 29, 2002
Linux rsync I/O errors allow DoS or root access	January 25, 2002
Symantec Enterprise Security Solutions check for susceptibility to the Micros...	December 20, 2001
Buffer Overflow in System V Derived Login	December 14, 2001
Malformed Microsoft Excel or PowerPoint documents bypass Microsoft macro secu...	October 4, 2001
Multi-vendor Unicode IDS bypass	September 7, 2001
Update: Symantec Customer Security Advisory for the CodeRed Worm	July 31, 2001
Symantec Enterprise Security Solutions protect against the Microsoft Windows ...	June 20, 2001
Symantec Enterprise Security Solutions protect against the sadmind/IIS worm a...	May 11, 2001
Symantec Enterprise Security Solutions protect against Microsoft Windows 2000...	May 2, 2001
Increased Risk in China/US Hacking Activity	April 30, 2001
Incorrect Mime Header Vulnerability (MSIE)	April 13, 2001
Lion worm and its propagation methods are detected and prevented by Symantec ...	March 26, 2001
Fraudulent Digital Certificate (Verisign)	March 24, 2001
Symantec security products address BIND vulnerabilities.	February 13, 2001
Lotus Domino Denial of Service Malformed HTML Email	February 8, 2001
Ramen WORM propagation methods are detected by Symantec security products	January 24, 2001
How Symantec Addresses Microsoft Compromise	October 31, 2000
Widespread Exploitation of Common Linux Vulnerabilities Reported	October 19, 2000

_{*For continued protection, make sure that your Symantec subscription and/or license are up to date.}