CVE - CVE-2010-0110

CVE-ID
CVE-2010-0110	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:45936 URL:http://www.securityfocus.com/bid/45936 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-028 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-030 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-031 MISC:http://www.zerodayinitiative.com/advisories/ZDI-11-032 SECTRACK:1024996 URL:http://securitytracker.com/id?1024996 SECUNIA:43099 URL:http://secunia.com/advisories/43099 SECUNIA:43106 URL:http://secunia.com/advisories/43106 VUPEN:ADV-2011-0234 URL:~~http://www.vupen.com/english/advisories/2011/0234~~ (Obsolete source) XF:symantec-intel-ams2-bo(64940) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/64940
Assigning CNA
MITRE Corporation
Date Record Created
20091231	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20091231)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)