Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5011

Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.

Published

2014-01-10T16:47:05.160

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 7.2 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec endpoint_protection ≤ 11.0.7.3 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.3001 Yes
Application symantec endpoint_protection 11.0.6000 Yes
Application symantec endpoint_protection 11.0.6100 Yes
Application symantec endpoint_protection 11.0.6200 Yes
Application symantec endpoint_protection 11.0.6200.754 Yes
Application symantec endpoint_protection 11.0.6300 Yes
Application symantec endpoint_protection 11.0.7000 Yes
Application symantec endpoint_protection 11.0.7100 Yes
References