Buffer Overflow Vulnerability in Symantec AntiVirus and Client Security
CVE-2010-0108

Currently unrated

Key Information:

Vendor

Symantec
Status
Antivirus
Client Security
Endpoint Protection
Vendor
CVE Published:
19 February 2010

What is CVE-2010-0108?

A buffer overflow vulnerability exists in the cliproxy.objects.1 ActiveX control within the Symantec Client Proxy (CLIproxy.dll) used in multiple versions of Symantec AntiVirus and Client Security. This flaw allows remote attackers to exploit it by executing arbitrary code on affected systems through a specially crafted long argument to the SetRemoteComputerName function, potentially compromising user systems.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/56355
vdb-entryx_refsource_XF
http://www.symantec.com/security_response/securityupdates...
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/509681/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

12% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.