7.1 High
AI Score
Confidence
Low
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.301 Low
EPSS
Percentile
96.9%
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call.
secunia.com/advisories/43099
secunia.com/advisories/43106
securitytracker.com/id?1024997
www.securityfocus.com/bid/45935
www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01
www.vupen.com/english/advisories/2011/0234
www.zerodayinitiative.com/advisories/ZDI-11-029
exchange.xforce.ibmcloud.com/vulnerabilities/64942
exchange.xforce.ibmcloud.com/vulnerabilities/64943