CVE-2012-0289 Memory corruption in n/a
Local attackers can exploit a buffer overflow in Symantec Endpoint Protection to gain privileges, modify data, or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-0289?
CVE-2012-0289 is a high-severity memory corruption vulnerability in Symantec Endpoint Protection, published on 23 May 2012. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.
Weakness: CWE-119
Which versions are affected by CVE-2012-0289?
It affects 2 products.
Products include Symantec Endpoint Protection, Symantec Network Access Control.
How do I fix CVE-2012-0289?
No fix has been published for CVE-2012-0289 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2012-0289 being exploited?
There is no known exploitation of CVE-2012-0289 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Symantec Endpoint Protection
- CVE-2012-0295 Code injection in n/a
- CVE-2018-5237 Privilege escalation in Symantec Endpoint Protection
- CVE-2020-5836 Privilege escalation in Symantec Endpoint Protection
- CVE-2020-5837 Path traversal in Symantec Endpoint Protection
- CVE-2020-5820 Privilege escalation in Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE)
Sources
Also known as GHSA-cxpv-whmj-frr8.