PT-2019-8879 · Symantec · Sep

Published 2019-04-25 · Updated 2020-08-24 · CVE-2018-12244

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SEP (Mac client) versions prior to and including 12.1 RU6 MP9 SEP (Mac client) versions prior to 14.2 RU1

Description The issue is related to a CSV/DDE injection, also known as formula injection, which occurs when an application allows untrusted input into CSV files.

Recommendations For SEP (Mac client) versions prior to and including 12.1 RU6 MP9, update to a version later than 12.1 RU6 MP9. For SEP (Mac client) versions prior to 14.2 RU1, update to version 14.2 RU1 or later.

Fix

RCE

Weakness Enumeration

CWE-1236

Related Identifiers

CVE-2018-12244

Affected Products

Sep

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-12244 · Security Note
• https://support.symantec.com/en_US/article.SYMSA1479.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-12244 · Vendor Advisory
• https://securityfocus.com/bid/107999 · Note