CVE:CVE-2007-3771
CNNVD:CNNVD-200707-250
Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition 10.1版本之前的版本,以及Client Security版本之前的版本3.1中存在栈缓冲区溢出。本地用户可以借助一个超长的(1)To,(2)From,或(3)输出的SMTP e-mail信息中的Subject页眉，造成拒绝服务(服务崩溃)。
solution:Upgrade symantec client_security to a higher version than 2.0,3.0,3.0.1.1000,3.0.1.1007,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2011,3.0.2.2021,and avoid the version 2.0,3.0,3.0.1.1000,3.0.1.1007,3.0.1.1009,3.0.2,3.0.2.2000,3.0.2.2001,3.0.2.2002,3.0.2.2011,3.0.2.2021; Upgrade symantec norton_antivirus to a higher version than 9.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.1.1000,9.0.2,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,10.0,10.0.1.1000,10.0.1.1007,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021,and avoid the version 9.0,9.0.0.338,9.0.1,9.0.1.1.1000,9.0.1.1000,9.0.2,9.0.2.1000,9.0.3.1000,9.0.4,9.0.5,9.0.5.1100,10.0,10.0.1.1000,10.0.1.1007,10.0.2.2000,10.0.2.2001,10.0.2.2002,10.0.2.2010,10.0.2.2011,10.0.2.2020,10.0.2.2021