CVE-2005-0249
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote...
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
Exploit likelihood
What each source reports
NVD Score used
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
CVE-2005-0249- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
CVE-2005-0249- Updated
- 2026-11-02
EUVDEUVD-2005-0250 No score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
EUVD-2005-0250- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4xqg-rgj7-cf6v No score
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote...
Heap-based buffer overflow in the DEC2EXE module for Symantec AntiVirus Library allows remote attackers to execute arbitrary code via a UPX compressed file containing a negative virtual offset to a crafted PE header.
- Record
GHSA-4xqg-rgj7-cf6v- Updated
- 2026-11-02
Affected products
- symantec antivirus scan engine
- symantec brightmail antispam
- symantec client security
- symantec gateway security
- symantec mail security
- symantec norton antivirus
- symantec norton internet security
- symantec norton system works
- symantec sav filter domino nt ports
- symantec sav filter for domino nt
- symantec web security
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-0249 is a high vulnerability (CVSS 7.5) in Symantec Antivirus Scan Engine, published February 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.8%, the 97th percentile. No source names a fixed version.