Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2009-1428

Quick assessment

Affected

n/a n/a

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Symantec Log Viewer中的ccLgView.exe存在多个跨站脚本攻击漏洞。当其在Symantec AntiVirus (SAV) 10.1 MR8之前版本，Symantec Endpoint Protection (SEP) 11.0 MR1之前的11.0版本，Norton 360 1.0版本和Norton Internet Security 2005到2008版本中被使用时，远程攻击者可以借助一个特制的电子邮件信息，注入任意的web脚本或HTML。这些漏洞与"双解析错误"有关。

AI Predicted 6.5 Difficulty: Easy EPSS 2.33% · P83 Updated Feb 21, 2026

Possible ATT&CK Techniques 1 AI

T1189 · Drive-by Compromise

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-1428

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus (SAV) before 10.1 MR8, Symantec Endpoint Protection (SEP) 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, related to "two parsing errors."

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Symantec Log Viewer 'ccLgView.exe'多个跨站脚本攻击漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-1428

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2009-1428

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-1428 (8)

http://www.securityfocus.com/bid/34669 vdb-entry x_refsource_BID
http://osvdb.org/54132 vdb-entry x_refsource_OSVDB
http://secunia.com/advisories/34936 third-party-advisory x_refsource_SECUNIA
http://www.securitytracker.com/id?1022133 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1022134 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1022135 vdb-entry x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1203 vdb-entry x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/50170 vdb-entry x_refsource_XF

Other References for CVE-2009-1428 (1)

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_01 x_refsource_CONFIRM

https://www.cve.org/CVERecord?id=CVE-2009-1428

Same Patch Batch · n/a · 2009-04-29 · 23 CVEs total

CVE-2009-1484		Gecad Axigen Mail Server web邮件界面跨站脚本攻击漏洞
CVE-2009-1478		Sun Solaris DTrace Handler IOCTL Request 多个本地拒绝服务漏洞
CVE-2009-1431		Symantec Alert Management System 2 安全漏洞
CVE-2009-1430		Symantec杀毒软件 Intel Alert Originator服务栈溢出漏洞
CVE-2009-1429		Symantec杀毒软件Intel LANDesk Common Base Agent服务任意代码执行漏洞
CVE-2009-0719		HP-UX 'useradd'本地未授权访问漏洞
CVE-2009-1489		FunGamez 'includes/user.php'本地文件包含和SQL注入漏洞
CVE-2009-1488		FunGamez 'admin/load.php'目录遍历漏洞
CVE-2009-1487		FunGamez 'pages/login.php'SQL注入漏洞
CVE-2009-1486		Ninjadesigns Flatchat 'pmscript.php'目录遍历漏洞
CVE-2009-1485		emuleplus emule_plus拒绝服务漏洞
CVE-2008-6768		Shopsystem-Forum K&S Shopsystem 'admin/editor/images.php'未限制文件上传漏洞
CVE-2009-1483		Studio Lounge Address Book'upload-file.php'未限制文件上传漏洞
CVE-2009-1482		MoinMoin 'AttachFile.py'多个跨站脚本攻击漏洞
CVE-2009-1481		Pjhome PuterJam's Blog PJBlog3 'action.asp' SQL注入漏洞
CVE-2009-1480		Pragyan CMS 'index.php' SQL注入漏洞
CVE-2008-6774		peterselie yourplace 'internettoolbar/edit.php'权限许可和访问控制漏洞
CVE-2008-6773		Peterselie YourPlace 'user/internettoolbar/edit.php'静态代码注入漏洞
CVE-2008-6772		Peterselie YourPlace 'login/register_form.php'绕过权限漏洞
CVE-2008-6771		Peterselie YourPlace 'user/uploads/phpinfo.php'系统信息泄露漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2009-1428

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2009-1428

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2009-1428

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2009-1428

III. Intelligence Information for CVE-2009-1428

Vendor Advisories for CVE-2009-1428 (8)

Other References for CVE-2009-1428 (1)

Same Patch Batch · n/a · 2009-04-29 · 23 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2009-1428

Leave a comment