CVE-2012-4953

CWE-119 — Buffer Overflow4 documents4 sources
Severity
9.3CRITICAL
EPSS
9.5%
top 7.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Symantec Scan EngineSymantec AntivirusSymantec Endpoint Protection
Timeline
PublishedNov 14
Latest updateMay 17

Description

The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages3 packages

▶NVDsymantec/antivirus7 versions+6

🔴Vulnerability Details

2
GHSA
GHSA-47rh-x646-j2vm: The decomposer engine in Symantec Endpoint Protection (SEP) 11↗2022-05-17
▶
CVEList
CVE-2012-4953: The decomposer engine in Symantec Endpoint Protection (SEP) 11↗2012-11-14
▶

💬Community

1
Bugzilla
CVE-2011-4953 cobbler: Privilege escalation by processing of crafted management parameters↗2012-04-12
▶
CVE-2012-4953 (CRITICAL CVSS 9.3) | The decomposer engine in Symantec E | cvebase.io