CVE-2009-0538
Severity Score
7.8
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file).
Una vulnerabilidad de formato de cadena en Symantec pcAnywhere antes de 12.5 SP1 permite a atacantes remotos leer y modificar localizaciones de memoria de su elección y producir una denegación de servicio (caída de la aplicación) o posiblemente tener otro efecto no especificado mediante especificadores de cadena de formato en el nombre de ruta de fichero de un fichero de control remoto (alias fichero .CHF).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-02-12 CVE Reserved
- 2009-03-18 CVE Published
- 2024-08-07 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-134: Use of Externally-Controlled Format String
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/52797 | Vdb Entry | |
| http://secunia.com/advisories/34305 | Third Party Advisory | |
| http://securitytracker.com/id?1021855 | Vdb Entry | |
| http://www.securityfocus.com/archive/1/501930/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/33845 | Vdb Entry | |
| http://www.vupen.com/english/advisories/2009/0755 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/49291 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html | 2018-10-11 |
| URL | Date | SRC |
|---|---|---|
| http://www.layereddefense.com/pcanywhere17mar.html | 2018-10-11 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | <= 12.5 Search vendor "Symantec" for product "Pcanywhere" and version " <= 12.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 10.0 Search vendor "Symantec" for product "Pcanywhere" and version "10.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 10.5 Search vendor "Symantec" for product "Pcanywhere" and version "10.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 11.0 Search vendor "Symantec" for product "Pcanywhere" and version "11.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 11.0.1 Search vendor "Symantec" for product "Pcanywhere" and version "11.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 11.5 Search vendor "Symantec" for product "Pcanywhere" and version "11.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 11.5.1 Search vendor "Symantec" for product "Pcanywhere" and version "11.5.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 12.0 Search vendor "Symantec" for product "Pcanywhere" and version "12.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Pcanywhere Search vendor "Symantec" for product "Pcanywhere" | 12.1 Search vendor "Symantec" for product "Pcanywhere" and version "12.1" | - |
Affected
| ||||||