CVE-2006-3456: The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in N...

Security readout for executives and security teams

This is a legacy Symantec Norton ActiveX issue affecting 2005 and 2006 consumer security products. A malicious website could destabilize Internet Explorer and create a path to arbitrary code execution through Symantec controls. The sources do not provide CVSS, patch detail, or current exploitation evidence. Exposure is most likely on old Windows endpoints still running Norton AntiVirus, Norton Internet Security, or System Works 2005/2006 with Internet Explorer ActiveX enabled. Modern managed environments are unlikely to be affected unless legacy desktops or lab systems remain in service. Treat this as a legacy exposure cleanup item with high impact if present. It should not drive emergency response without evidence of affected systems, but any confirmed installations should be removed or isolated because the software is obsolete and browser-triggered code execution is possible. Mitigation focus: Review Symantec's 2007 advisory for vendor-approved updates or mitigations.; Remove or replace unsupported Norton 2005/2006 products on any remaining endpoints.; Disable or tightly restrict Internet Explorer ActiveX where legacy systems cannot be retired..

Prepared

Jun 29, 2026, 05:42 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.