CPE Details
Symantec LiveUpdate 1.0
1.0
2009-11-25
17h34 +00:00
17h34 +00:00
2009-11-25
17h34 +00:00
17h34 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:a:symantec:liveupdate:1.0:*:*:*:*:*:*:*
Informations
Vendor
symantecProduct
liveupdateVersion
1.0Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. | 5 |
|||
| Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site. | 9.8 |
Critique |
