NetSight
IP …
critical10.0Public exploit code

CVE-2010-0108

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

Affected products

VendorProductAffected versions
SymantecAntivirus
Versions 10.0, 10.0.1, 10.0.1.1, 10.0.2, 10.0.2.1, 10.0.2.2
SymantecClient Security
Versions 3.0, 3.0.0.359, 3.0.1.1000, 3.0.1.1007, 3.0.1.1008, 3.0.2
SymantecEndpoint Protection
Version 11.0

Weakness classification

CWE-119

References