PT-2010-1926 · Symantec · Symantec Client Security+1

Publicado 2010-02-19 · Atualizado 2018-10-30 · CVE-2010-0106

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus versions 10.0.x through 10.1.x before MR9 Symantec AntiVirus version 10.2.x Symantec Client Security versions 3.0.x through 3.1.x before MR9

Description The issue allows remote attackers to cause a denial of service, specifically preventing on-demand scanning, when Tamper protection is disabled. This is achieved via specific events that prevent the user from having read access to unspecified resources.

Recommendations For Symantec AntiVirus versions 10.0.x through 10.1.x before MR9, update to a version that includes MR9 or later to resolve the issue. For Symantec AntiVirus version 10.2.x, consider enabling Tamper protection as a temporary workaround until a patch is available. For Symantec Client Security versions 3.0.x through 3.1.x before MR9, update to a version that includes MR9 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2010-0106

Produtos afetados

Symantec Antivirus

Symantec Client Security

Referências · 9

• http://vupen.com/english/advisories/2010/0410 · Aviso do Fabricante
• http://osvdb.org/62414 · Nota
• http://securityfocus.com/bid/38219 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0106 · Nota
• http://securitytracker.com/id?1023621 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56354 · Nota
• http://secunia.com/advisories/38653 · Aviso do Fabricante
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0106 · Nota de Segurança