CVE-2007-3021
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec...
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
Exploit likelihood
What each source reports
NVD Score used
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
- Record
CVE-2007-3021- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
- Record
CVE-2007-3021- Updated
- 2026-11-02
EUVDEUVD-2007-3013 No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
- Record
EUVD-2007-3013- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-j45j-wm3x-xr92 No score
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec...
Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, does not initialize a critical variable, which allows attackers to create arbitrary executable files via unknown manipulations of a file that is created during data export.
- Record
GHSA-j45j-wm3x-xr92- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3021 is a high vulnerability (CVSS 7.5) in Symantec Client Security, published June 5, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.02%, the 81st percentile. No source names a fixed version.
References
symantec.com/avcenter/security/Content/2007.06.05a.html
securityfocus.com/bid/24313
osvdb.org/36109
securitytracker.com/id?1018196
vupen.com/english/advisories/2007/2074
exchange.xforce.ibmcloud.com/vulnerabilities/34744
secunia.com/advisories/25543
nvd.nist.gov/vuln/detail/CVE-2007-3021
github.com/advisories/GHSA-j45j-wm3x-xr92