Remote Code Execution Vulnerability in Intel Alert Management System by Symantec

CVE-2010-0111

Summary

The vulnerability exists in the Intel Alert Handler service, which allows remote attackers to execute arbitrary programs on affected systems. By sending a specially crafted UNC share pathname to msgsys.exe, an attacker can exploit the system’s CreateProcessA function, leading to unauthorized execution of programs. This impacts multiple Symantec products, including older versions of Symantec AntiVirus Corporate Edition and Symantec Quarantine Servers, making it crucial for users to ensure their systems are updated and protected.

References