CVE - CVE-2010-3268

CVE-ID
CVE-2010-3268	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:45936 URL:http://www.securityfocus.com/bid/45936 BUGTRAQ:20101213 [CORE-2010-0728] Symantec Intel Handler Service Remote Denial-of-Service URL:http://www.securityfocus.com/archive/1/515191/100/0/threaded CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 MISC:http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos SECTRACK:1024866 URL:http://www.securitytracker.com/id?1024866 SECUNIA:42593 URL:http://secunia.com/advisories/42593 SECUNIA:43099 URL:http://secunia.com/advisories/43099 VUPEN:ADV-2010-3206 URL:~~http://www.vupen.com/english/advisories/2010/3206~~ (Obsolete source) VUPEN:ADV-2011-0234 URL:~~http://www.vupen.com/english/advisories/2011/0234~~ (Obsolete source) XF:symantec-antivirus-handler-service-dos(64028) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/64028
Assigning CNA
MITRE Corporation
Date Record Created
20100909	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20100909)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)