Login Request a demo
Unscored severity · published Dec 31, 2002
CVE-2002-1779
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NP
Norton Personal Firewall · Symantec
2002 · source: NVD
Affected product
NP
Norton Personal Firewall
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1779
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1779
online.securityfocus.com
http://online.securityfocus.com/archive/1/267850
Vendor Advisory
http://securityresponse.symantec.com/avcenter/security/Content/2002.05.16.html
www.securityfocus.com
http://www.securityfocus.com/bid/4545
More from Norton Personal Firewall
–
CVE-2007-3699
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR…
–
CVE-2007-0447
Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives
–
CVE-2007-3673
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Security 2.0 through 3.1, Norton AntiSpam 2005, and Norton…
–
CVE-2007-1689
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary…
–
CVE-2007-1793
SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows…