PT-2009-3191 · Symantec · Symantec Pcanywhere

Publicado 2009-03-18 · Atualizado 2018-10-11 · CVE-2009-0538

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec pcAnywhere versions prior to 12.5 SP1

Description The issue allows local users to read and modify arbitrary memory locations, and cause a denial of service, possibly having other unspecified impacts. This is achieved via format string specifiers in the pathname of a remote control file.

Recommendations For versions prior to 12.5 SP1, update to Symantec pcAnywhere version 12.5 SP1 or later to resolve the issue.

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2009-0538

Produtos afetados

Symantec Pcanywhere

Referências · 10

• http://securityfocus.com/archive/1/501930/100/0/threaded · Nota
• http://vupen.com/english/advisories/2009/0755 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0538 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49291 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html · Aviso do Fabricante
• http://osvdb.org/52797 · Nota
• http://securitytracker.com/id?1021855 · Nota
• http://secunia.com/advisories/34305 · Nota
• http://securityfocus.com/bid/33845 · Nota
• http://layereddefense.com/pcanywhere17mar.html · Aviso do Fabricante