Stack-Based Buffer Overflow in Intel Alert Management System Affecting Symantec Products

CVE-2010-0110

Summary

The Intel Alert Management System, utilized within several Symantec products, has multiple stack-based buffer overflow vulnerabilities. Attackers can exploit these weaknesses remotely by sending specially crafted input to the msgsys.exe service. These inputs may include overly long strings, modem strings, or PIN numbers. Such vectors could allow unauthorized remote code execution, posing a significant risk to systems running affected versions of Symantec AntiVirus Corporate Edition, Symantec System Center, and Symantec Quarantine Server. It is imperative that users apply the necessary patches and updates to mitigate these vulnerabilities effectively.

References