5

CVE-2010-3268

Exploit
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Intel Alert Management System
   Microsoft ≫ Windows 2000 Version - Update sp4
Symantec ≫ Antivirus Version 10.1.4.4010 Edition corporate
   Microsoft ≫ Windows 2000 Version - Update sp4
Symantec ≫ Endpoint Protection Version 11.0
Symantec ≫ Endpoint Protection Version 11.0 Update rtm
Symantec ≫ Endpoint Protection Version 11.0 Update ru5
Symantec ≫ Endpoint Protection Version 11.0 Update ru6
Symantec ≫ Endpoint Protection Version 11.0 Update ru6a
Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp1
Symantec ≫ Endpoint Protection Version 11.0 Update ru6mp2
Symantec ≫ Endpoint Protection Version 11.0.1
Symantec ≫ Endpoint Protection Version 11.0.1 Update mp1
Symantec ≫ Endpoint Protection Version 11.0.1 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.2
Symantec ≫ Endpoint Protection Version 11.0.2 Update mp1
Symantec ≫ Endpoint Protection Version 11.0.2 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.4
Symantec ≫ Endpoint Protection Version 11.0.4 Update mp1a
Symantec ≫ Endpoint Protection Version 11.0.4 Update mp2
Symantec ≫ Endpoint Protection Version 11.0.3001
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.32% 0.87
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/42593
Vendor Advisory
http://secunia.com/advisories/43099
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos
Exploit
http://www.securityfocus.com/archive/1/515191/100/0/threaded
http://www.securityfocus.com/bid/45936
http://www.securitytracker.com/id?1024866
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
http://www.vupen.com/english/advisories/2010/3206
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0234
https://exchange.xforce.ibmcloud.com/vulnerabilities/64028