CVE-2009-1432

Currently unrated

Key Information:

Vendor
Symantec
Status
Antivirus
Client Security
Endpoint Protection
Vendor
CVE Published:
30 April 2009

Summary

Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.

References

http://www.vupen.com/english/advisories/2009/1204
vdb-entryx_refsource_VUPEN
http://securitytracker.com/id?1022137
vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/34856
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.