Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 75.6%.
Buffer Overflow
Microsoft
Symantec
Norton Antivirus
Norton Internet Security
+16
NVD
Exploit-DB
CVSS 3.0
9.8
EPSS
75.6%
Threat
5.7
It was found that JGroups did not require necessary headers for encrypt and auth protocols from new nodes joining the cluster. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Information Disclosure
Red Hat
Jboss Enterprise Application Platform
Jgroups
NVD
CVSS 3.1
9.8
EPSS
1.5%