PT-2013-3275 · Symantec · Symantec Endpoint Protection Small Business Edition+1

Published 2013-06-20 · Updated 2013-06-20 · CVE-2013-1612

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1.x through 12.1.2 Symantec Endpoint Protection Center Small Business Edition versions 12.0.x

Description A buffer overflow issue exists in the secars.dll component of the management console, allowing remote attackers to execute arbitrary code.

Recommendations For Symantec Endpoint Protection Manager versions 12.1.x through 12.1.2, update to version 12.1.3 or later. For Symantec Endpoint Protection Center Small Business Edition versions 12.0.x, consider upgrading to a version that is not affected by this issue, as no specific fixed version is mentioned for this product.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2013-1612

Affected Products

Symantec Endpoint Protection Small Business Edition

Symantec Endpoint Protection Manager

References · 5

• 🔥 https://exploit-db.com/exploits/33056 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-1612 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1612 · Note
• http://securityfocus.com/bid/60542 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20130618_00 · Note