CVE-2007-1689
Norton Internet Security and Personal Firewall - Buffer Overflow via ISAlertDataCOM ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-1689.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/nis2004_get.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in the ISAlertDataCOM ActiveX Control (ISLAert.dll) in Symantec Norton Internet Security 2004. It leverages a long string passed to the 'Get()' method to execute arbitrary code via a crafted HTML page.
Description
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
Exploits (2)
This exploit targets a stack buffer overflow in the ISAlertDataCOM ActiveX Control (ISLAert.dll) in Symantec Norton Internet Security 2004. It leverages a long string passed to the 'Get()' method to execute arbitrary code via a crafted HTML page.
This Metasploit module exploits a stack buffer overflow in the ISAlertDataCOM ActiveX Control (ISLAert.dll) in Symantec Norton Internet Security 2004. It sends an overly long string to the 'Get()' method to achieve arbitrary code execution.