CVE-2013-1612

2013-06-2003:17:30

CWE-119

symantec

web.nvd.nist.gov

security

vulnerability

cve-2013-1612

buffer overflow

symantec

endpoint protection manager

CVSS2

7.9

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.8

Confidence

Low

EPSS

0.172

Percentile

96.2%

JSON

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd

Node

symantecendpoint_protection_managerMatch12.1.0

symantecendpoint_protection_managerMatch12.1.1

symantecendpoint_protection_managerMatch12.1.2

Node

symantecendpoint_protection_centerMatch12.0.0-small_business

symantecendpoint_protection_centerMatch12.0.1-small_business

VendorProductVersionCPE
symantecendpoint_protection_manager12.1.0cpe:2.3:a:symantec:endpoint_protection_manager:12.1.0:*:*:*:*:*:*:*
symantecendpoint_protection_manager12.1.1cpe:2.3:a:symantec:endpoint_protection_manager:12.1.1:*:*:*:*:*:*:*
symantecendpoint_protection_manager12.1.2cpe:2.3:a:symantec:endpoint_protection_manager:12.1.2:*:*:*:*:*:*:*
symantecendpoint_protection_center12.0.0cpe:2.3:a:symantec:endpoint_protection_center:12.0.0:-:small_business:*:*:*:*:*
symantecendpoint_protection_center12.0.1cpe:2.3:a:symantec:endpoint_protection_center:12.0.1:-:small_business:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	endpoint_protection_manager	12.1.0	cpe:2.3:a:symantec:endpoint_protection_manager:12.1.0:::::::*
symantec	endpoint_protection_manager	12.1.1	cpe:2.3:a:symantec:endpoint_protection_manager:12.1.1:::::::*
symantec	endpoint_protection_manager	12.1.2	cpe:2.3:a:symantec:endpoint_protection_manager:12.1.2:::::::*
symantec	endpoint_protection_center	12.0.0	cpe:2.3:a:symantec:endpoint_protection_center:12.0.0:-:small_business:::::*
symantec	endpoint_protection_center	12.0.1	cpe:2.3:a:symantec:endpoint_protection_center:12.0.1:-:small_business:::::*