Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service (flood) via DNS spoofing of the update.symantec.com site.
| Software | From | Fixed in |
|---|---|---|
| symantec / liveupdate | 1.5 | 1.5.x |
| symantec / liveupdate | 1.6 | 1.6.x |
| symantec / liveupdate | 1.4 | 1.4.x |