CVE-2010-3268

Severity Score

5.0

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.

La función GetStringAMSHandler en prgxhndl.dll en hndlrsvc.exe en Intel Alert Handler service (conocido como Symantec Intel Handler service) en Intel Alert Management System (AMS), como el usado en Symantec Antivirus Corporate Edition v10.1.4.4010 en Windows 2000 SP4 y Symantec Endpoint Protection anterior v11.x, no valida adecuadamente el campo CommandLine de una petición AMS, lo que permite a atacantes remotos causar una denegación de servicio (caída aplicación) a través de peticiones manipuladas.

*Credits: N/A

CVSS Scores

NISTv2 5.0

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2010-09-09 CVE Reserved
2010-12-13 CVE Published
2024-07-02 EPSS Updated
2024-08-07 CVE Updated
2024-08-07 First Exploit
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-20: Improper Input Validation

CAPEC

References (10)

URL	Tag	Source
http://secunia.com/advisories/43099	Third Party Advisory
http://www.securityfocus.com/archive/1/515191/100/0/threaded	Mailing List
http://www.securityfocus.com/bid/45936	Vdb Entry
http://www.securitytracker.com/id?1024866	Vdb Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00	X_refsource_confirm
http://www.vupen.com/english/advisories/2011/0234	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/64028	Vdb Entry

URL	Date	SRC
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/42593	2018-10-30
http://www.vupen.com/english/advisories/2010/3206	2018-10-30

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intel Search vendor "Intel"	Intel Alert Management System Search vendor "Intel" for product "Intel Alert Management System"	*	-	Affected	in	Symantec Search vendor "Symantec"	Antivirus Search vendor "Symantec" for product "Antivirus"	10.1.4.4010 Search vendor "Symantec" for product "Antivirus" and version "10.1.4.4010"	corporate	Affected
Intel Search vendor "Intel"	Intel Alert Management System Search vendor "Intel" for product "Intel Alert Management System"	*	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows 2000 Search vendor "Microsoft" for product "Windows 2000"	-	sp4	Safe
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		-		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		rtm		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		ru5		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		ru6		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		ru6a		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		ru6mp1		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0"		ru6mp2		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.1 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.1"		-		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.1 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.1"		mp1		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.1 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.1"		mp2		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.2 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.2"		-		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.2 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.2"		mp1		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.2 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.2"		mp2		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.4 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.4"		-		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.4 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.4"		mp1a		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.4 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.4"		mp2		Affected
Symantec Search vendor "Symantec"		Endpoint Protection Search vendor "Symantec" for product "Endpoint Protection"				11.0.3001 Search vendor "Symantec" for product "Endpoint Protection" and version "11.0.3001"		-		Affected