PT-2017-13006 · Symantec · Symantec Proxyclient

Published 2017-09-01 · Updated 2019-10-03 · CVE-2017-13674

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec ProxyClient version 3.4 for Windows

Description The issue allows a malicious local Windows user to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges under certain circumstances.

Recommendations For Symantec ProxyClient version 3.4 for Windows, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2017-13674

Affected Products

Symantec Proxyclient

References · 4

• https://symantec.com/security-center/network-protection-security-advisories/SA152 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-13674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13674 · Security Note
• http://securityfocus.com/bid/100554 · Note