PT-2019-12926 · Symantec · Symantec Endpoint Protection+1

Published 2019-11-14 · Updated 2020-08-24 · CVE-2019-12758

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 14.2 RU2

Description The issue allows an individual to execute unsigned code, potentially bypassing self-defense mechanisms. This could enable an attacker to execute code without a proper digital signature.

Recommendations For Symantec Endpoint Protection versions prior to 14.2 RU2, update to version 14.2 RU2 or later to resolve the issue.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2019-12758

Affected Products

Symantec Endpoint Protection

Symantec Endpoint Protection Client

References · 6

• 🔥 https://safebreach.com/Post/Symantec-Endpoint-Protection-Self-Defense-Bypass-and-Potential-Usages-CVE-2019-12758 · Exploit
• https://support.symantec.com/us/en/article.SYMSA1488.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-12758 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12758 · Security Note
• https://t.me/defcon_news/30220 · Telegram Post
• https://t.me/rnetsec/10894 · Telegram Post