| Event ID | 167 |
| Source | Symantec Mail Security |
| Description | The process SAVFMSESp.exe terminated unexpectedly |
| Event Information | According to Symantec: ------------------------------------------------------------------------------ Situation:Buffer overflow causes a problem when a Symantec Mail Security for Microsoft Exchange product terminates. The scan process (SAVFMSESp.exe) to terminate unexpectedly and restart. Event ID 167,appear in the Windows Application Event log. If you enable VSAPI debug logging from the debug.asp page, the issue does not occur. Solution:Symantec Mail Security for Microsoft Exchange 4.0 build 461 had a fix for this problem. All newer builds contain this fix. An alternate source for this buffer overflow is not setting exclusions correctly when a Symantec Corporate Edition product is also installed. The exclusions should include the Mail Security temp folder. ------------------------------------------------------------------------------ |
| Reference Links | Buffer overflow causes the scan process (SAVFMSESp.exe) to terminate unexpectedly and restart |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.