CVE-2005-2758

None

CVSS

—

EPSS

13.4%

Published

Oct 5, 2005

CISA due date

—

The record

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow.

Affected packages

Ecosystem	Package	Introduced	Fixed