CVE-2014-3434 Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitr...
MediumCVSS 6.9
EPSS 1.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec endpoint protection | = 11.0 | No fix listed |
| symantec endpoint protection | = 12.0 | No fix listed |
| symantec endpoint protection | = 12.1 | No fix listed |
References
- packetstormsecurity.com
- 58996 third-party-advisory
- 59697 third-party-advisory
- 34272 exploit
- VU#252068 third-party-advisory us-government-resource
- 109663 vdb-entry
- 68946 exploit vdb-entry
- www.symantec.com vendor-advisory
- symantec-endpoint-priv-escalation(95062) vdb-entry