iDefense Security Advisory 05.09.07 – Remote exploitation of a design error vulnerability in an ActiveX control installed by Symantec Norton Internet Security 2006 could allow for the execution of arbitrary code. Defense confirmed the existence of this vulnerability within version 12.2.0.13 of NavOpts.dll as distributed with Norton Internet Security 2006. Prior versions are suspected to be vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/56632/05.09.07-1.txt
Source: https://packetstormsecurity.com/files/56632/iDEFENSE-Security-Advisory-2007-05-09.1.html