CVE-2010-0108 Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Securi...
HighCVSS 10.0
EPSS 19.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus | = 10.0 | No fix listed |
| symantec antivirus | = 10.0.1 | No fix listed |
| symantec antivirus | = 10.0.1.1 | No fix listed |
| symantec antivirus | = 10.0.2 | No fix listed |
| symantec antivirus | = 10.0.2.1 | No fix listed |
| symantec antivirus | = 10.0.2.2 | No fix listed |
| symantec antivirus | = 10.0.3 | No fix listed |
| symantec antivirus | = 10.0.4 | No fix listed |
| symantec antivirus | = 10.0.5 | No fix listed |
| symantec antivirus | = 10.0.6 | No fix listed |
| symantec antivirus | = 10.0.7 | No fix listed |
| symantec antivirus | = 10.0.8 | No fix listed |
| symantec antivirus | = 10.0.9 | No fix listed |
| symantec antivirus | = 10.1 | No fix listed |
| symantec antivirus | = 10.1-mp1 | No fix listed |
| symantec antivirus | = 10.1-mr4 | No fix listed |
| symantec antivirus | = 10.1-mr5 | No fix listed |
| symantec antivirus | = 10.1-mr7 | No fix listed |
| symantec antivirus | = 10.1.0.1 | No fix listed |
| symantec antivirus | = 10.1.4 | No fix listed |
| symantec antivirus | = 10.1.4.1 | No fix listed |
| symantec antivirus | = 10.1.5 | No fix listed |
| symantec antivirus | = 10.1.5.1 | No fix listed |
| symantec antivirus | = 10.1.6 | No fix listed |
| symantec antivirus | = 10.1.6.1 | No fix listed |
Show 28 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec antivirus | = 10.1.7 | No fix listed |
| symantec antivirus | = 10.2 | No fix listed |
| symantec antivirus | = 10.2-mr2 | No fix listed |
| symantec antivirus | = 10.2-mr3 | No fix listed |
| symantec client security | = 3.0 | No fix listed |
| symantec client security | = 3.0-mr1 | No fix listed |
| symantec client security | = 3.0-mr2 | No fix listed |
| symantec client security | = 3.0.0.359 | No fix listed |
| symantec client security | = 3.0.1.1000 | No fix listed |
| symantec client security | = 3.0.1.1007 | No fix listed |
| symantec client security | = 3.0.1.1008 | No fix listed |
| symantec client security | = 3.0.2 | No fix listed |
| symantec client security | = 3.0.2.2000 | No fix listed |
| symantec client security | = 3.0.2.2001 | No fix listed |
| symantec client security | = 3.0.2.2010 | No fix listed |
| symantec client security | = 3.0.2.2011 | No fix listed |
| symantec client security | = 3.0.2.2020 | No fix listed |
| symantec client security | = 3.0.2.2021 | No fix listed |
| symantec client security | = 3.1 | No fix listed |
| symantec client security | = 3.1-mr4 | No fix listed |
| symantec client security | = 3.1-mr5 | No fix listed |
| symantec client security | = 3.1-mr7 | No fix listed |
| symantec client security | = 3.1.0.396 | No fix listed |
| symantec client security | = 3.1.0.401 | No fix listed |
| symantec client security | = 3.1.394 | No fix listed |
| symantec client security | = 3.1.400 | No fix listed |
| symantec client security | = 3.1.401 | No fix listed |
| symantec endpoint protection | = 11.0 | No fix listed |
References
- dsecrg.com
- 38651 third-party-advisory vendor-advisory
- 20100219 [DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow. mailing-list
- 38222 vdb-entry
- www.symantec.com
- ADV-2010-0412 vdb-entry vendor-advisory
- scp-cliproxy-activex-bo(56355) vdb-entry