Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Symantec Decomposer may freeze when processing malicious RAR

CVE-2007-3699 · published 19 years ago
Summary

The Decomposer part of several Symantec security products can get stuck in an endless loop if it reads a specially crafted RAR file. This can temporarily stop the affected product from working, causing a denial of service. Apply the latest updates from Symantec or avoid opening untrusted RAR archives until the fix is installed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
symantec antivirus_scan_engine 4.0
4.1
4.1.8
4.3
4.3.3
4.3.7.27
4.3.8.29
4.3.12
5.0
5.0.1
cpe:2.3:a:symantec:antivirus_scan_engine:4.0:*:*:*:*:*:*:*
symantec brightmail_antispam 4.0
5.5
6.0
6.0.1
6.0.2
6.0.3
6.0.4
cpe:2.3:a:symantec:brightmail_antispam:4.0:*:*:*:*:*:*:*
symantec client_security 2.0
2.0.1_build_9.0.1.1000
2.0.2_build_9.0.2.1000
2.0.3_build_9.0.3.1000
2.0.4
2.0.5_build_1100_mp1
2.0.6
3.0
3.0.0.359
3.0.1.1000
3.0.1.1001
3.0.1.1007
13 more version ranges
cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*
symantec mail_security 4.0
4.0.1
4.1
4.5
4.5.4.743
4.5_build_719
4.5_build_736
4.5_build_741
4.6.1.107
4.6.3
4.6_build_97
5.0
4 more version ranges
cpe:2.3:a:symantec:mail_security:4.0:*:domino:*:*:*:*:*
symantec norton_antivirus 9.0
9.0.0
9.0.0.338
9.0.1
9.0.1.1.1000
9.0.2
9.0.2.1000
9.0.3
9.0.3.1000
9.0.4
9.0.5
9.0.5.1100
26 more version ranges
cpe:2.3:a:symantec:norton_antivirus:*:*:corporate_edition_for_linux:*:*:*:*:*
symantec norton_internet_security 3.0
2004
2005
2006
cpe:2.3:a:symantec:norton_internet_security:3.0:*:macintosh:*:*:*:*:*
symantec norton_personal_firewall 2006
2006_9.1.0.33
2006_9.1.1.7
cpe:2.3:a:symantec:norton_personal_firewall:2006:*:*:*:*:*:*:*
symantec norton_system_works 3.0
2004
2005
2006
cpe:2.3:a:symantec:norton_system_works:3.0:*:macintosh:*:*:*:*:*
symantec symantec_antivirus_filtering_\+for_domino 3.0.12
cpe:2.3:a:symantec:symantec_antivirus_filtering_\+for_domino:3.0.12:*:*:*:*:*:*:*
symantec web_security 2.5
3.0
3.0.1
3.0.1.70
3.0.1.76
3.0.1_build_3.01.70
3.0.1_build_3.01.72
3.0.1_build_3.01.74
3.01.59
3.01.60
3.01.61
3.01.62
4 more version ranges
cpe:2.3:a:symantec:web_security:2.5:*:*:*:*:*:*:*
symantec gateway_security_5000_series 3.0.1
cpe:2.3:h:symantec:gateway_security_5000_series:3.0.1:*:*:*:*:*:*:*
symantec gateway_security_5400 2.0.1
cpe:2.3:h:symantec:gateway_security_5400:2.0.1:*:*:*:*:*:*:*
symantec mail_security_8820_appliance All versions
cpe:2.3:h:symantec:mail_security_8820_appliance:*:*:*:*:*:*:*:*
Original advisory text
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service (infinite loop) via a certain value in the PACK_SIZE field of a RAR archive file header.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.3 Critical
Exploitation
4% chance of attack within 30 days
Timeline
Published5 Oct 2007
Updated23 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-3699 · NVD
Track software like this
Free during beta