Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0108

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

Published

2010-02-19T17:30:00.690

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 10.0 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec antivirus 10.0 Yes
Application symantec antivirus 10.0.1 Yes
Application symantec antivirus 10.0.1.1 Yes
Application symantec antivirus 10.0.2 Yes
Application symantec antivirus 10.0.2.1 Yes
Application symantec antivirus 10.0.2.2 Yes
Application symantec antivirus 10.0.3 Yes
Application symantec antivirus 10.0.4 Yes
Application symantec antivirus 10.0.5 Yes
Application symantec antivirus 10.0.6 Yes
Application symantec antivirus 10.0.7 Yes
Application symantec antivirus 10.0.8 Yes
Application symantec antivirus 10.0.9 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1 Yes
Application symantec antivirus 10.1.0.1 Yes
Application symantec antivirus 10.1.4 Yes
Application symantec antivirus 10.1.4.1 Yes
Application symantec antivirus 10.1.5 Yes
Application symantec antivirus 10.1.5.1 Yes
Application symantec antivirus 10.1.6 Yes
Application symantec antivirus 10.1.6.1 Yes
Application symantec antivirus 10.1.7 Yes
Application symantec antivirus 10.2 Yes
Application symantec antivirus 10.2 Yes
Application symantec antivirus 10.2 Yes
Application symantec client_security 3.0 Yes
Application symantec client_security 3.0 Yes
Application symantec client_security 3.0 Yes
Application symantec client_security 3.0.0.359 Yes
Application symantec client_security 3.0.1.1000 Yes
Application symantec client_security 3.0.1.1007 Yes
Application symantec client_security 3.0.1.1008 Yes
Application symantec client_security 3.0.2 Yes
Application symantec client_security 3.0.2.2000 Yes
Application symantec client_security 3.0.2.2001 Yes
Application symantec client_security 3.0.2.2010 Yes
Application symantec client_security 3.0.2.2011 Yes
Application symantec client_security 3.0.2.2020 Yes
Application symantec client_security 3.0.2.2021 Yes
Application symantec client_security 3.1 Yes
Application symantec client_security 3.1 Yes
Application symantec client_security 3.1 Yes
Application symantec client_security 3.1 Yes
Application symantec client_security 3.1.0.396 Yes
Application symantec client_security 3.1.0.401 Yes
Application symantec client_security 3.1.394 Yes
Application symantec client_security 3.1.400 Yes
Application symantec client_security 3.1.401 Yes
Application symantec endpoint_protection 11.0 Yes
References