PT-2019-8879 · Symantec · Sep

Publicado 2019-04-25 · Atualizado 2020-08-24 · CVE-2018-12244

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SEP (Mac client) versions prior to and including 12.1 RU6 MP9 SEP (Mac client) versions prior to 14.2 RU1

Description The issue is related to a CSV/DDE injection, also known as formula injection, which occurs when an application allows untrusted input into CSV files.

Recommendations For SEP (Mac client) versions prior to and including 12.1 RU6 MP9, update to a version later than 12.1 RU6 MP9. For SEP (Mac client) versions prior to 14.2 RU1, update to version 14.2 RU1 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-1236

Identificadores relacionados

CVE-2018-12244

Produtos afetados

Sep

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-12244 · Nota de Segurança
• https://securityfocus.com/bid/107999 · Nota
• https://support.symantec.com/en_US/article.SYMSA1479.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12244 · Aviso do Fabricante