CVE-2009-1428

N/A Unknown
Published: April 29, 2009 Modified: April 23, 2026
View on NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/54132
Source: cve@mitre.org
http://secunia.com/advisories/34936
Source: cve@mitre.org
http://www.securityfocus.com/bid/34669
Source: cve@mitre.org
http://www.securitytracker.com/id?1022133
Source: cve@mitre.org
http://www.securitytracker.com/id?1022134
Source: cve@mitre.org
http://www.securitytracker.com/id?1022135
Source: cve@mitre.org
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01
Source: cve@mitre.org
http://www.vupen.com/english/advisories/2009/1203
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/50170
Source: cve@mitre.org
http://osvdb.org/54132
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/34936
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/34669
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022133
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022134
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securitytracker.com/id?1022135
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2009/1203
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/50170
Source: af854a3a-2127-422b-91ae-364da2661108

18 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.4%
81th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-79

Affected Vendors

symantec

Related CVEs

CVE-2026-7024 5.4
CVE-2026-7023 6.3
CVE-2026-7022 7.3
CVE-2026-7021 3.5
CVE-2026-7020 5.6