Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-1970

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.

Published

2005-06-16T04:00:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec pcanywhere 8.0.1 Yes
Application symantec pcanywhere 8.0.2 Yes
Application symantec pcanywhere 9.0 Yes
Application symantec pcanywhere 9.0.1 Yes
Application symantec pcanywhere 9.2 Yes
Application symantec pcanywhere 10.0 Yes
Application symantec pcanywhere 10.5 Yes
Application symantec pcanywhere 11.0 Yes
References