CVE-2010-0107: Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security...

Security readout for executives and security teams

This is an old Symantec/Norton ActiveX buffer overflow affecting legacy consumer and enterprise security products. A malicious site scenario could crash the product and possibly run code, but the CVE notes the attacker must masquerade as an authorized site. Exposure is mainly unmanaged legacy Windows endpoints. Organizations are exposed if they still run Norton 360 1.0 or 2.0, Norton Internet Security/AntiVirus/SystemWorks/Confidential 2006-2008, or Symantec Client Security versions before the listed MR9 releases. Treat this as a legacy exposure cleanup item, not a current emergency based on the supplied evidence. Prioritize any still-running affected products because security software often has broad system privileges. Mitigation focus: Inventory endpoints for the affected Symantec and Norton product versions.; Review Symantec advisory 20100217_01 for vendor-approved updates or removal guidance.; Upgrade Symantec Client Security to the applicable MR9 or later release..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.