PT-2019-12926 · Symantec · Symantec Endpoint Protection+1

Publicado 2019-11-14 · Atualizado 2020-08-24 · CVE-2019-12758

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2

Description The issue allows an individual to execute unsigned code, potentially bypassing self-defense mechanisms. This could enable an attacker to execute code without a proper digital signature.

Recommendations For Symantec Endpoint Protection versions prior to 14.2 RU2, update to version 14.2 RU2 or later to resolve the issue.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2019-12758

Produtos afetados

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Referências · 6

• 🔥 https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758 · Exploit
• https://t.me/defcon_news/30220 · Publicação no Telegram
• https://support.symantec.com/us/en/article.SYMSA1488.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-12758 · Aviso do Fabricante
• https://t.me/rnetsec/10894 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-12758 · Nota de Segurança