CVE-2010-0108
Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.
Desbordamiento de búfer en un control ActiveX en el proxy de cliente de Symantec (CLIproxy.dll) en Symantec AntiVirus v10.0.x, v10.1.x anterior a MR9 y v10.2.x anterior a MR4 y Symantec Client Security v3.0.x y v3.1.x anterior a MR9 podría permitir a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos relacionados con un proxy.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-12-31 CVE Reserved
- 2010-02-17 First Exploit
- 2010-02-19 CVE Published
- 2024-07-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://dsecrg.com/pages/vul/show.php?id=139 | X_refsource_misc | |
| http://www.securityfocus.com/archive/1/509681/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/38222 | Vdb Entry | |
| http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/56355 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/33642 | 2010-02-17 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/38651 | 2018-10-30 | |
| http://www.vupen.com/english/advisories/2010/0412 | 2018-10-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0 Search vendor "Symantec" for product "Antivirus" and version "10.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.1 Search vendor "Symantec" for product "Antivirus" and version "10.0.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.1.1 Search vendor "Symantec" for product "Antivirus" and version "10.0.1.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.2 Search vendor "Symantec" for product "Antivirus" and version "10.0.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.2.1 Search vendor "Symantec" for product "Antivirus" and version "10.0.2.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.2.2 Search vendor "Symantec" for product "Antivirus" and version "10.0.2.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.3 Search vendor "Symantec" for product "Antivirus" and version "10.0.3" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.4 Search vendor "Symantec" for product "Antivirus" and version "10.0.4" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.5 Search vendor "Symantec" for product "Antivirus" and version "10.0.5" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.6 Search vendor "Symantec" for product "Antivirus" and version "10.0.6" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.7 Search vendor "Symantec" for product "Antivirus" and version "10.0.7" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.8 Search vendor "Symantec" for product "Antivirus" and version "10.0.8" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.0.9 Search vendor "Symantec" for product "Antivirus" and version "10.0.9" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | mp1, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | mr4, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | mr5, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1 Search vendor "Symantec" for product "Antivirus" and version "10.1" | mr7, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.0.1 Search vendor "Symantec" for product "Antivirus" and version "10.1.0.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.4 Search vendor "Symantec" for product "Antivirus" and version "10.1.4" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.4.1 Search vendor "Symantec" for product "Antivirus" and version "10.1.4.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.5 Search vendor "Symantec" for product "Antivirus" and version "10.1.5" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.5.1 Search vendor "Symantec" for product "Antivirus" and version "10.1.5.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.6 Search vendor "Symantec" for product "Antivirus" and version "10.1.6" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.6.1 Search vendor "Symantec" for product "Antivirus" and version "10.1.6.1" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.1.7 Search vendor "Symantec" for product "Antivirus" and version "10.1.7" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.2 Search vendor "Symantec" for product "Antivirus" and version "10.2" | corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.2 Search vendor "Symantec" for product "Antivirus" and version "10.2" | mr2, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Antivirus Search vendor "Symantec" for product "Antivirus" | 10.2 Search vendor "Symantec" for product "Antivirus" and version "10.2" | mr3, corporate |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0 Search vendor "Symantec" for product "Client Security" and version "3.0" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0 Search vendor "Symantec" for product "Client Security" and version "3.0" | mr1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0 Search vendor "Symantec" for product "Client Security" and version "3.0" | mr2 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.0.359 Search vendor "Symantec" for product "Client Security" and version "3.0.0.359" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.1.1000 Search vendor "Symantec" for product "Client Security" and version "3.0.1.1000" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.1.1007 Search vendor "Symantec" for product "Client Security" and version "3.0.1.1007" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.1.1008 Search vendor "Symantec" for product "Client Security" and version "3.0.1.1008" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2 Search vendor "Symantec" for product "Client Security" and version "3.0.2" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2000 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2000" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2001 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2001" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2010 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2010" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2011 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2011" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2020 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2020" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.0.2.2021 Search vendor "Symantec" for product "Client Security" and version "3.0.2.2021" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1 Search vendor "Symantec" for product "Client Security" and version "3.1" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1 Search vendor "Symantec" for product "Client Security" and version "3.1" | mr4 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1 Search vendor "Symantec" for product "Client Security" and version "3.1" | mr5 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1 Search vendor "Symantec" for product "Client Security" and version "3.1" | mr7 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1.0.396 Search vendor "Symantec" for product "Client Security" and version "3.1.0.396" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1.0.401 Search vendor "Symantec" for product "Client Security" and version "3.1.0.401" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1.394 Search vendor "Symantec" for product "Client Security" and version "3.1.394" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1.400 Search vendor "Symantec" for product "Client Security" and version "3.1.400" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Client Security Search vendor "Symantec" for product "Client Security" | 3.1.401 Search vendor "Symantec" for product "Client Security" and version "3.1.401" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection" | 11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0" | - |
Affected
| ||||||