CVE-2010-0108

2010-02-1917:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2010-0108

buffer overflow

symantec

remote code execution

cliproxy.dll

activex

nvd

vulnerability

7.8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.68 Medium

EPSS

Percentile

98.0%

JSON

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

CPENameOperatorVersion
symantec:antivirussymantec antiviruseq10.1.6.1
symantec:client_securitysymantec client securityeq3.0
symantec:antivirussymantec antiviruseq10.0.7
symantec:antivirussymantec antiviruseq10.0.2.1
symantec:antivirussymantec antiviruseq10.2
symantec:client_securitysymantec client securityeq3.0.2.2020
symantec:antivirussymantec antiviruseq10.0.6
symantec:client_securitysymantec client securityeq3.0.2.2021
symantec:client_securitysymantec client securityeq3.0.1.1000
symantec:antivirussymantec antiviruseq10.0.3

CPE	Name	Operator	Version
symantec:antivirus	symantec antivirus	eq	10.1.6.1
symantec:client_security	symantec client security	eq	3.0
symantec:antivirus	symantec antivirus	eq	10.0.7
symantec:antivirus	symantec antivirus	eq	10.0.2.1
symantec:antivirus	symantec antivirus	eq	10.2
symantec:client_security	symantec client security	eq	3.0.2.2020
symantec:antivirus	symantec antivirus	eq	10.0.6
symantec:client_security	symantec client security	eq	3.0.2.2021
symantec:client_security	symantec client security	eq	3.0.1.1000
symantec:antivirus	symantec antivirus	eq	10.0.3