CVE-2012-0289

CVE-2012-0289 affects Symantec Endpoint Protection and Symantec Network Access Control (SEP/SNAC) on Windows. The issue is a buffer overflow in SEP/SNAC components (notably SemSvc/AgentServlet) that, via crafted input, allowed local users to gain privileges and potentially cause data modification...

CVE-2012-4349

The CVE-2012-4349 entry concerns a root cause in Symantec Network Access Control (SNAC) 12.1 before RU2, where an unquoted Windows search path could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability is tied to SNAC’s startup path handling, enabling local...