KLA10354 ACE vulnerability in Symantec Endpoint Protection

A buffer overflow was found in Symantec products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed argument.

Original advisories

Symantec advisory

Exploitation

Public exploits exist for this vulnerability.

Related products

Symantec-Endpoint-Protection

CVE list

CVE-2014-3434 high

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Symantec Endpoint Protection Client 11 all versionsSymantec Endpoint Protection Client 12 before 12.1 RU4 MP1b updateSymantec Endpoint Protection Small Buisness Edition versions 12.0 nad earlier