CVE-2010-0107

{"id": "CVE-2010-0107", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-02-23T20:30:00.467", "references": [{"url": "http://osvdb.org/62412", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/38654", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/archive/1/509717/100/0/threaded", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/38217", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023628", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023629", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023630", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1023631", "source": "cve@mitre.org"}, {"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/0411", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/56357", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can \"masquerade as an authorized site.\""}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el control ActiveX (SYMLTCOM.dll) en Symantec N360 v1.0 y v2.0; Norton Internet Security, AntiVirus, SystemWorks, y Confidential 2006 through 2008; y Symantec Client Security v3.0.x anteriores a v3.1 MR9, y v3.1.x anteriores a MR9; permite a atacantes remotos producir una denegaci\u00f3n de servicio (ca\u00edda) y posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores desconocidos. NOTA: Esto solo es una vulnerabilidad si el atacante puede actuar como si fuese un sitio autorizado."}], "lastModified": "2018-10-10T19:51:03.757", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "844A6963-F60C-4D48-8445-9056C99201D6"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2852548A-39A6-44FB-A73E-96507BA0CD8C"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FB9641FC-FF7B-4413-8163-B795AA35C888"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17862D7F-7001-46B8-A415-2A15A247E9BD"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "170AEE7B-31AF-44E2-9B63-9703D0DE721C"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E651C9BE-201B-4DDC-A650-F9269531290C"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56EA0BAC-ED6D-45D2-995C-18B828906E1C"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63B1A9FC-707C-4F6F-959B-30B28E43D202"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87E4E013-A819-42E0-8F8E-9B2D409F900E"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "097B87A8-8176-4426-BDE4-6FDDD272E1B9"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5EBD7767-C352-435B-8963-83F723FFD302"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E2FC1708-B643-4489-A59C-EBDAFD9B0078"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7DCE0C8A-A97C-4DE1-B0EE-3A2D16A34C77"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE714705-CEE9-4BA1-8573-FD3765BC7F94"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D24019B-20F0-4B4D-86A5-9409698E6216"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD25A172-D70C-44E0-9551-F390AF0AD8A5"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FB89648-5727-4F8F-83B7-3E11CE69EA3A"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E5A8C92-95C4-4ECC-AEA4-37F830B890E8"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17110872-8BD5-4CB0-9F2A-B18D091A7EC8"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9D29AD07-6545-4180-8E32-C18586684845"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3706E76-FC65-467E-8D09-A9EAC32E9BBD"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BF555313-BB5A-4D8A-A3A1-609ABC39F6FE"}, {"criteria": "cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BC74372F-329A-4597-810B-88B865771C9D"}, {"criteria": "cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00819E08-CC5C-48FC-9F80-95B68AB19C65"}, {"criteria": "cpe:2.3:a:symantec:norton_360:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9405ECC3-F518-40F7-9541-904C6FACBC85"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "44843812-35FC-4378-B239-EEC74A0C8A39"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C988B309-F397-412A-8570-C3823C7FE7E0"}, {"criteria": "cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA990FD5-DF2F-470A-936D-155A36BEDE3B"}, {"criteria": "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C1CC64B1-772C-42A9-9B0A-08CA92DC87E4"}, {"criteria": "cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "692ECBCD-AB6B-4965-93F4-BDAD4777C018"}, {"criteria": "cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3EF87752-C86D-4C89-9DE9-F874068C89EC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}