[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110139

 
 

909

 
 

85964

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML view JSON

CVE-2010-3268Date: (C)2010-12-22   (M)2018-02-19


The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : CVSS Score : 5.0
Exploit Score: Exploit Score: 10.0
Impact Score: Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: Access Vector: NETWORK
Attack Complexity: Access Complexity: LOW
Privileges Required: Authentication: NONE
User Interaction: Confidentiality: NONE
Scope: Integrity: NONE
Confidentiality: Availability: PARTIAL
Integrity:  
Availability:  
  
Reference:
SECTRACK-1024866
http://www.securityfocus.com/archive/1/archive/1/515191/100/0/threaded
SECUNIA-42593
SECUNIA-43099
BID-45936
ADV-2010-3206
ADV-2011-0234
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
symantec-antivirus-handler-service-dos(64028)

CPE    16
cpe:/a:symantec:endpoint_protection:11.0.2:mp2
cpe:/a:symantec:endpoint_protection:11.0.4:mp1a
cpe:/a:symantec:endpoint_protection:11.0:ru6a
cpe:/a:symantec:endpoint_protection:11.0.2:mp1
...
CWE    1
CWE-20

© SecPod Technologies