CVE-2012-4953

2012-11-1412:30:59

CWE-119

[email protected]

web.nvd.nist.gov

symantec

endpoint protection

cve-2012-4953

security

denial of service

remote attackers

arbitrary code

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

High

0.021 Low

EPSS

Percentile

89.2%

JSON

The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file.

Affected configurations

NVD

Node

symantecantivirusMatch10.1.0-corporate

symantecantivirusMatch10.1.4corporate

symantecantivirusMatch10.1.5corporate

symantecantivirusMatch10.1.6corporate

symantecantivirusMatch10.1.7corporate

symantecantivirusMatch10.1.8corporate

symantecantivirusMatch10.1.9corporate

symantecendpoint_protectionMatch11.0

symantecendpoint_protectionMatch12.0-small_business

symantecscan_engineRange≤5.2

CPENameOperatorVersion
symantec:antivirussymantec antiviruseq10.1.0
symantec:antivirussymantec antiviruseq10.1.4
symantec:antivirussymantec antiviruseq10.1.5
symantec:antivirussymantec antiviruseq10.1.6
symantec:antivirussymantec antiviruseq10.1.7
symantec:antivirussymantec antiviruseq10.1.8
symantec:antivirussymantec antiviruseq10.1.9
symantec:endpoint_protectionsymantec endpoint protectioneq11.0
symantec:endpoint_protectionsymantec endpoint protectioneq12.0
symantec:scan_enginesymantec scan enginele5.2

CPE	Name	Operator	Version
symantec:antivirus	symantec antivirus	eq	10.1.0
symantec:antivirus	symantec antivirus	eq	10.1.4
symantec:antivirus	symantec antivirus	eq	10.1.5
symantec:antivirus	symantec antivirus	eq	10.1.6
symantec:antivirus	symantec antivirus	eq	10.1.7
symantec:antivirus	symantec antivirus	eq	10.1.8
symantec:antivirus	symantec antivirus	eq	10.1.9
symantec:endpoint_protection	symantec endpoint protection	eq	11.0
symantec:endpoint_protection	symantec endpoint protection	eq	12.0
symantec:scan_engine	symantec scan engine	le	5.2