Description

Use the LiveUpdate feature of Symantec Endpoint Protection to download the security update.

Security Update 7 adds coverage for the following vulnerabilities and threats:

• HTTP Embed Tag NPDSPlay DLL BO
• HTTP ACTi Video Controller ActiveX File Overwrite
• HTTP Apple QuickTime QTL Code Execution
• HTTP Baidu Soba Search Bar ActiveX BO
• HTTP BaoFeng Storm MPS ActiveX BO
• HTTP EasyMail EMSMTP ActiveX BO
• HTTP EDraw Office Viewer ActiveX File Overwrite
• HTTP FastLook Activity
• HTTP GlobalLink gltemflat ActiveX BO
• HTTP HP Digital Imaging HPQVWOCX ActiveX Overwrite
• HTTP HP Digital Imaging HPQXML ActiveX Overwrite
• HTTP HP Photo and Imaging ActiveX BO
• HTTP Iconics Dialog Activex BO
• HTTP Move Media Player Quantum ActiveX BO
• HTTP MS SQL Server SQLDMO Activex BO
• HTTP PPStream PowerPlayer ActiveX BO
• HTTP Subversion Windows Client Dir Traversal
• HTTP Ultra Crypto CryptoX ActiveX BO
• HTTP Ultra Crypto SaveToFile ActiveX File Overwrite
• HTTP VMWare IntraProcessingLog File Overwrite
• HTTP VMWare Vielib StartProcess ActiveX Code Exec
• HTTP VMWare Vielib CreateProcess ActiveX Code Exec
• HTTP Worm W32.PYKSPA.D
• HTTP XunLei WebThunder DownURL2 ActiveX File Download
• HTTP MicroCMS RevertContent SQL Injection
• Motorola Timbuktu Login Request BO
• HTTP Yvora CMS Error_View SQL Injection

Security Update 7 provides updated coverage for the following vulnerabilities and threats:

• HTTP BookedSpace Activity
• CWSIEFEATS Data Transfer
• HTTP FormMail Cmd Exec
• HTML WinHelp Item BO
• HTTP 1st AntiVirus Activity
• HTTP ABXToolbar Activity
• ActiveSearch Search Activity
• HTTP Actsoft Dvdtools ActiveX BO
• Adbars Search Activity
• Adblock Redirect Activity
• Adblock Update Activity
• HTTP Ademco ATNBaseLoader100 ActiveX BO
• Alexa User Info Tracking
• HTTP AltaVista DirTraversal
• HTTP AMX VNC ActiveX Control BO
• HTTP Anaconda Directory Traversal
• HTTP AOL SuperBuddy Activex Code Exec
• HTTP Quicktime RTSP URI BO
• HTTP Aurora Activity
• HTTP Axis Camera Control ActiveX BO
• HTTP BadBlue MFCISAPI Cmd BO
• HTTP Banktown ActiveX BO
• HTTP MS BizTalk DTA RemoteExec
• HTTP British Telecom Webhelper ActiveX BO
• HTTP BroadcastPC Activity
• HTTP Buddy Zone SQL Injection
• HTTP CoolWebSearch Activity 2
• HTTP Cryptomathic ActiveX Control BO
• HTTP Dart ZipLite ActiveX BO
• HTTP Dart Zip ActiveX BO
• HTTP DB Software Lab VimpX ActiveX BO
• HTTP DesktopMedia Activity
• HTTP DirectAnimation KeyFrame Heap BO
• HTTP Director Download Activity
• HTTP DollarRevenue Download Activity
• HTTP DownloadPlus Activity
• HTTP DXMedia SDK Flashpix ActiveX BO
• HTTP EasyBe 123 Music Store SQL Inj.
• HTTP eCentrex VOIP Client ActiveX BO
• Elitebar Control Information Activity
• Elitebar Update Activity
• HTTP eSellerate ActiveX BO
• HTTP E-Vision CMS SQL Injection
• HTTP Excel MSO Remote Code Exec
• HTTP Excel Multiple Remote Code Exec (1)
• HTTP Excel Multiple Remote Code Exec (3)
• HTTP Excel ShockWave Obj Flash JS Exec
• HTTP Eziin Activity
• HTTP FIZZLE Config Request
• HTTP FlashBB Sendmsg.php File Include
• HTTP FlashEnhancer Activity
• HTTP DiVX Zenith Player ActiveX BO
• HTTP GetMySystem BarCodeWiz ActiveX BO
• HTTP Gracenote CddbCtrl SetClientInfo BO
• HTTP HP Instant Support ActiveX BO
• HTTP HP Mercury QC Activex BO
• HTTP htdig File Disclosure
• HTTP IASysteminfo ActiveX BO
• HTTP ID Auto. Linear Barcode ActiveX BO
• HTTP MS IE CHM Cross-Domain Redirect
• HTTP Iebar Activity
• HTTP IEHlpr CCNNLC Update Activity
• HTTP IEHlpr Register Activity
• IEPlugin Activity
• HTTP MS IE Help CTRL Local Zone Bypass
• HTTP MS IFRAME JOB Share Redirect
• HTTP MS IIS Showcode ASP Request
• HTTP Imaut File Download Activity
• HTTP Incredimail ActiveX BO
• Instafinder Reporting Mistyped URL
• HTTP Interactual Player IAKey ActiveX BO
• HTTP InterActual Player ActiveX BO
• HTTP Internet Download Accel. ActiveX BO
• HTTP iPix Image Well Activex BO
• HTTP KSignSWAT ActiveX BO
• HTTP LeadTools ISIS Control ActiveX BO
• HTTP Leadtools JPEG Activex Control BO
• HTTP Leadtools Raster Dialog ActiveX BO
• HTTP LeadTools Raster File Obj ActiveX BO
• HTTP Leadtools Raster ISIS ActiveX BO
• HTTP LinkedIn Toolbar ActiveX BO
• HTTP Look2me Activity
• HTTP LoveFreeGames Activity
• HTTP Macromedia Flash ActiveX DOS
• HTTP Margoc Activity
• HTTP MatrixSearch Activity
• HTTP Excel Multiple Remote Code Exec (4)
• HTTP MoneyGainer Download Activity
• HTTP MS showhelp CHM Download Attempt
• HTTP MS Excel Unicode HLINK BO
• HTTP MSIE VML RecolorInfo Code Exec
• HTTP MS CMS Information Disclosure
• HTTP MS MSODataSourceControl ActiveX BO
• HTTP MS Publisher Malform File Code Exec
• HTTP MS Virtual Machine Prog Exec
• HTTP MS Visio Malformed File Code Exec
• HTTP MS WMS ActiveX Remote Code Exec
• HTTP NCTAudioFile2 ActiveX BO
• HTTP Netsprint Toolbar ActiveX BO
• HTTP Norton 2004 ISAlert BO
• HTTP Novell AccessMgr IssueInstat XSS
• HTTP OfferAgent Ad Popup Activity
• HTTP OfferAgent Install Request
• HTTP Office OCX PowerPoint Viewer BO
• HTTP Peacomm Download Activity
• HTTP Pegasus ImagN ActiveX BO
• HTTP PHPBB URL Decode SQL Injection
• HTTP Precisionid Barcode ActiveX BO
• HTTP Precision Data Matrix ActiveX BO
• HTTP Strip Activity
• PurityScan Notification Activity
• HTTP MDAC RDS Dataspace Rem Code Exec.
• HTTP RKD Barcode ActiveX BO
• HTTP SalesLogix SQL Injection
• HTTP SAP EnjoySAP Kwedit ActiveX BO
• HTTP SAP EnjoySAP RFCGUIsink ActiveX BO
• HTTP SAP Message Server Group Param BO
• HTTP SGI InfoSearch fname Exec
• HTTP Sienzo Digital Music ActiveX BO
• HTTP Sienzo Ltmm15 ActiveX BO
• HTTP Sign Korea ActiveX BO
• HTTP SignKorea Skcrypx Activex BO
• HTTP Sina UC ActiveX BO
• Infostealer Snifula.B HTTP Activity
• HTTP Sonycam SncP5View ActiveX BO
• HTTP Surfsidkick Info Upload
• HTTP Sygate Policy Mgr SQL Injection
• HTTP Symantec Norton Ghost Remote DLL BO
• Tafbar Install File Request
• HTTP Taltech Talbar Activex BO
• HTTP TrustInPopups Activity
• HTTP Vanish Activity
• HTTP Versalsoft File Upload ActiveX BO
• HTTP VMWare ActiveX Control BO
• HTTP W32 Relfeer Activity
• HTTP Webext Install Activity
• WhenU Installation Activity
• WhenU Update Events
• HTTP Winpup Activity
• HTTP WorldSearch Activity
• HTTP Xoops Horoscope File Include
• HTTP XOOPS SQL Injection
• HTTP XunLei WebThunder ActiveX Download
• HTTP Yahoo Messenger Webcam ActiveX BO
• HTTP Yahoo Voice Chat ActiveX BO
• HTTP Yahoo Widget Engine Activex BO
• HTTP Zenturi Prgchk AX Nav URL File Exec
• HTTP Zenturi ProgramChecker ActiveX BO
• HTTP Zenturi DebugMsgLog ActiveX BO
• HTTP Zenturi Fill Method ActiveX BO
• HTTP Zomplog PHP Dir. Traversal
• HTTP ZQuest Activity
• HTTP IEDriver Popup Activity
• Incredifind Redirect Activity
• ISearch Mistyped URL Hijack Attempt
• ISTBar Fav Menu Porn Site Request
• LinkMaker Activity
• Look2ME Updates
• MedLoad Logging Activity
• HTTP MS IE FTP Proto Hndlr Loc File Disc
• HTTP MS IE MSWebDVD Object DoS
• HTTP MS IIS ASP Source Disclosure
• NaviHelper Update Activity
• HTTP QuickSearch Activity
• RSA Agent WebRedirect BO
• SuperSpider Hijack Activity
• SurfSideKick AutoUpdate Activity
• HTTP SurfSideKick Installation Activity
• Websearch Configuration Request
• HTTP MS XP HCP URI Handler Abuse
• Yahoo IM Login
• Yahoo IM Conference Invite
• Yahoo Conference Login
• Yahoo IM File Transfer
• Yahoo IM Activity
• Yahoo Ping

Security Update 7 removed coverage for the following vulnerabilities and threats:

• ISTBar Configuration Request