Test ID:	1.3.6.1.4.1.25623.1.0.105783
Category:	Web application abuses
Title:	Symantec Messaging Gateway Decomposer Engine Multiple Parsing Vulnerabilities (SYM16-010)
Summary:	Parsing of maliciously-formatted container files may cause; memory corruption, integer overflow or buffer overflow in Symantecs Decomposer engine.
Description:	Summary: Parsing of maliciously-formatted container files may cause memory corruption, integer overflow or buffer overflow in Symantecs Decomposer engine. Vulnerability Insight: In the TNEF unpacker, the overflow does not result in any detrimental actions due to underlying code. However this was an exposure due to improper implementation that could potentially be leveraged further, at some point, by a malicious individual. As such, it also was addressed in the engine update. Vulnerability Impact: Successful exploitation of these vulnerabilities typically results in an application-level denial of service but could result in arbitrary code execution. An attacker could potentially run arbitrary code by sending a specially crafted file to a user. Affected Software/OS: Symantec Messaging Gateway version 10.6.1-3 and prior. Solution: Update to version 10.6.1-4 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2207 BugTraq ID: 91434 http://www.securityfocus.com/bid/91434 https://www.exploit-db.com/exploits/40031/ http://www.securitytracker.com/id/1036198 http://www.securitytracker.com/id/1036199 Common Vulnerability Exposure (CVE) ID: CVE-2016-2209 BugTraq ID: 91436 http://www.securityfocus.com/bid/91436 https://www.exploit-db.com/exploits/40037/ Common Vulnerability Exposure (CVE) ID: CVE-2016-2210 BugTraq ID: 91437 http://www.securityfocus.com/bid/91437 https://www.exploit-db.com/exploits/40032/ Common Vulnerability Exposure (CVE) ID: CVE-2016-2211 BugTraq ID: 91438 http://www.securityfocus.com/bid/91438 Common Vulnerability Exposure (CVE) ID: CVE-2016-3644 BugTraq ID: 91431 http://www.securityfocus.com/bid/91431 https://www.exploit-db.com/exploits/40034/ Common Vulnerability Exposure (CVE) ID: CVE-2016-3645 BugTraq ID: 91439 http://www.securityfocus.com/bid/91439 https://www.exploit-db.com/exploits/40035/ Common Vulnerability Exposure (CVE) ID: CVE-2016-3646 BugTraq ID: 91435 http://www.securityfocus.com/bid/91435 https://www.exploit-db.com/exploits/40036/
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.