PT-2010-1926 · Symantec · Symantec Client Security+1

Published 2010-02-19 · Updated 2018-10-30 · CVE-2010-0106

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus versions 10.0.x through 10.1.x before MR9 Symantec AntiVirus version 10.2.x Symantec Client Security versions 3.0.x through 3.1.x before MR9

Description The issue allows remote attackers to cause a denial of service, specifically preventing on-demand scanning, when Tamper protection is disabled. This is achieved via specific events that prevent the user from having read access to unspecified resources.

Recommendations For Symantec AntiVirus versions 10.0.x through 10.1.x before MR9, update to a version that includes MR9 or later to resolve the issue. For Symantec AntiVirus version 10.2.x, consider enabling Tamper protection as a temporary workaround until a patch is available. For Symantec Client Security versions 3.0.x through 3.1.x before MR9, update to a version that includes MR9 or later to resolve the issue.

Fix

Related Identifiers

CVE-2010-0106

Affected Products

Symantec Antivirus

Symantec Client Security

References · 9

• http://vupen.com/english/advisories/2010/0410 · Vendor Advisory
• http://secunia.com/advisories/38653 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0106 · Security Note
• http://osvdb.org/62414 · Note
• http://securityfocus.com/bid/38219 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0106 · Note
• http://securitytracker.com/id?1023621 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56354 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00 · Note