CVE-2012-0291

CWE-20 — Improper Input Validation3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.7%
top 28.78%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Symantec PcanywhereSymantec Altiris Client Management Suite Pcanywhere SolutionSymantec Altiris Deployment Solution Remote Pcanywhere Solution+1 more
Timeline
PublishedFeb 22
Latest updateMay 4

Description

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages4 packages

▶NVDsymantec/pcanywhere12.5+15

🔴Vulnerability Details

2
GHSA
GHSA-cgf9-m6wc-gqrr: Symantec pcAnywhere through 12↗2022-05-04
▶
CVEList
CVE-2012-0291: Symantec pcAnywhere through 12↗2012-02-22
▶
CVE-2012-0291 (MEDIUM CVSS 5) | Symantec pcAnywhere through 12.5.3 | cvebase.io