critical9.3Public exploit code
CVE-2010-2305
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass2010-06-11 · remote · windows · Verified
Impact
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Sygate Personal Firewall | Version 5.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/65539
- http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/
- http://www.exploit-db.com/exploits/13834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59408
- http://osvdb.org/65539
- http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/
- http://www.exploit-db.com/exploits/13834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59408