CVE-2009-0538

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service application crash or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file aka...

CVE-2008-4564

A stack-based buffer overflow in Autonomy KeyView SDK wp6sr.dll (WordPerfect document parser) allows remote code execution. The CVE-2008-4564 issue affects IBM Lotus Notes (and other products using KeyView), caused by unbounded copying of records into a fixed-size stack buffer when processing WPD...

Symantec pcAnywhere Format String Denial of Service

SUMMARY Symantec pcAnywhere is susceptible to a format string vulnerability. An authorized local user may potentially leverage this to crash the pcAnywhere application, leading to a denial of service. AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec pcAnywhere | 12....

Symantec Products Update Vulnerable Autonomy KeyView Module

SUMMARY Symantec products that ship and use a third-party Autonomy KeyView module have updated the module to address a buffer overflow vulnerability reported against the KeyView module. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Mail Security for Domino |...

L0phtCrack password cracker set to return

More than two years after Symantec pulled the plug on L0phtCrack, the venerable password cracking tool is being prepped for a return to the spotlight. The original creators of L0phtCrack has reacquired the tool with plans to release a new version at next week’s SOURCE Boston conference. A teaser...

Adobe under fire for poor security response

In the wake of the zero-day attacks against Adobe’s Acrobat and Reader product lines, the company is taking a lot of flack for its poor response to handling the issue — specifically around communicating the risks and providing migitation guidance for end users. Over on the ZDNet Zero Day blog, I...

Microsoft Excel未明远程代码执行漏洞

BUGTRAQ ID: 33870 CNCAN ID：CNCAN-2009022404 Microsoft Excel是一款微软开发的电子表格处理程序。 Microsoft Excel存在未明问题，远程攻击者可以利用漏洞以运行此程序的用户上下文执行任意指令。 目前没有详细漏洞细节提供。Symantec报告此漏洞，目前检测名为'Trojan.Mdropper.AC'。 Microsoft Excel 2007 SP1 Microsoft Excel 2007 厂商解决方案 目前没有解决方案提供： http://office.microsoft.com/excel...

CVE-2009-0651

CVE-2009-0651 affects Symantec Veritas NetBackup Server/Enterprise Server 5.x, 6.0 (pre MP7 SP1) and 6.5 (pre 6.5.3.1). The issue is described as an unspecified vulnerability in the Veritas network daemon (vnetd) that could allow a remote attacker to execute arbitrary code via unknown vectors rel...

Symantec Veritas NetBackup通讯设置远程权限提升漏洞

BUGTRAQ ID: 33772 Veritas NetBackup是大型的数据备份应用系统。 在正常的管理登录过程中Veritas NetBackup服务器会通过Veritas网络守护程序vnetd与客户端通讯，而这个通讯过程在初始通讯设置时没有正确地过滤用户提供数据，可能允许能够访问目标主机所在本地网络的非特权用户向系统注入任意代码，之后以管理权限执行。成功利用这个漏洞可能导致内存破坏和拒绝服务，或在目标主机上获得管理权限。 Symantec VERITAS NetBackup 6.5 Symantec VERITAS NetBackup 6.0 Symantec VERITAS...

Symantec Endpoint Protection 'Smc.exe'本地拒绝服务漏洞

BUGTRAQ ID: 33753 CNCAN ID：CNCAN-2009021303 Symantec Endpoint Protection是一款赛门铁克企业级防病毒产品。 Symantec Endpoint Protection存在设计错误，本地攻击者可以利用漏洞使应用程序崩溃。 提交"smc.exe -p "命令，无需管理员特权可导致smcgui.exe崩溃 Symantec Endpoint Protection 11.0.4000 Symantec Endpoint Protection 11.0 厂商解决方案 目前没有解决方案提供：...

CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

DSquare Exploit Pack: D2SEC_APPSTREAM

Name| d2secappstream ---|--- CVE| CVE-2008-4388 Exploit Pack| D2ExploitPack Description| Symantec AppStream Client LaunchObj ActiveX Arbitrary Code Execution Vulnerability Notes|...

Code injection

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

CVE-2008-4388

CVE-2008-4388 affects Symantec AppStream Client 5.x with the LaunchObj ActiveX control (launcher.dll) prior to 5.2.2 SP3 MP1. The issue arises in the installAppMgr() method (and unspecified other methods), where downloaded files are not properly validated, enabling remote code execution via a cra...

CVE-2008-4388

The LaunchObj ActiveX control before 5.2.2.865 in launcher.dll in Symantec AppStream Client 5.2.x before 5.2.2 SP3 MP1 does not properly validate downloaded files, which allows remote attackers to execute arbitrary code via the installAppMgr method and unspecified other methods...

Symantec AppStream LaunchObj ActiveX Control Arbitrary File Download and Execute

This module exploits a vulnerability in Symantec AppStream Client 5.x. The vulnerability is in the LaunchObj ActiveX control launcher.dll 5.1.0.82 containing the "installAppMgr" method. The insecure method can be exploited to download and execute arbitrary files in the context of the currently...

Symantec AppStream Client LaunchObj ActiveX Control Multiple Unsafe Methods (SYM09-001)

The version of the LaunchObj ActiveX control, a component included with Symantec AppStream Client / Altiris Streaming Agent and installed on the remote Windows host, reportedly contains a number of unsafe methods, such as 'installAppMgr', that can be used to download and execute arbitrary code. I...

Symantec AppStream客户端LaunchObj ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 33247 CVECAN ID: CVE-2008-4388 Symantec AppStream是Windows的应用程序部署框架。 AppStream Windows客户端所提供的LaunchObj ActiveX控件没有安全地调用installAppMgr方式，如果用户受骗访问了恶意网页并对该方式传送了特制参数的话，就会导致向用户系统下载并执行任意代码。 Symantec AppStream Client 5.2 临时解决方法： 在IE中禁用LaunchObj ActiveX控件，为以下CLSID设置kill bit：...

Symantec AppStream ActiveX Unauthorized Access

SUMMARY Vulnerabilities were reported in an ActiveX control that Symantecs AppStream 5.2.x Client installs. Exploitation of this issue could possibly lead to unauthorized information disclosure, system information corruption or potentially allow arbitrary code execution in the context of the user...

Symantec AppStream LaunchObj ActiveX control vulnerable to arbitrary code download and execution

Overview The Symantec AppStream LaunchObj ActiveX control contains methods that can be used to download and execute arbitrary code. Description Symantec AppStream is an application deployment framework for Microsoft Windows. One of the components of the AppStream Windows Client is an ActiveX...