Evil-DB LogoEvil-DB
← All CVEs

CVE-2010-0108

high · 10

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

10
CVSS
19.4%
EPSS (exploit prob.)
97th
EPSS percentile
2010-02-19
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
symantecantivirus10.0
symantecantivirus10.0.1
symantecantivirus10.0.1.1
symantecantivirus10.0.2
symantecantivirus10.0.2.1
symantecantivirus10.0.2.2
symantecantivirus10.0.3
symantecantivirus10.0.4
symantecantivirus10.0.5
symantecantivirus10.0.6
symantecantivirus10.0.7
symantecantivirus10.0.8
symantecantivirus10.0.9
symantecantivirus10.1
symantecantivirus10.1
symantecantivirus10.1
symantecantivirus10.1
symantecantivirus10.1
symantecantivirus10.1
symantecantivirus10.1.0.1
symantecantivirus10.1.4
symantecantivirus10.1.4.1
symantecantivirus10.1.5
symantecantivirus10.1.5.1
symantecantivirus10.1.6
symantecantivirus10.1.6.1
symantecantivirus10.1.7
symantecantivirus10.2
symantecantivirus10.2
symantecantivirus10.2
symantecclient_security3.0
symantecclient_security3.0
symantecclient_security3.0
symantecclient_security3.0.0.359
symantecclient_security3.0.1.1000
symantecclient_security3.0.1.1007
symantecclient_security3.0.1.1008
symantecclient_security3.0.2
symantecclient_security3.0.2.2000
symantecclient_security3.0.2.2001

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2010-0108