← Back

CVE-2010-0110

nvd nist
Published: Jan 31, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.9
Vector
AV:A/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 5.5 / Impact: 10.0
Source: NVD

Description

Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.

Affected (39)

Symantec
3 products
Antivirus
System Center
Antivirus Central Quarantine Server
Configuration A
35 vulnerable
Vulnerable SoftwareAffected Versions
Symantec
Antivirus
Version 10.0.1.1
Antivirus
Version 10.0.1.2
Antivirus
Version 10.0.1
Antivirus
Version 10.0.2.1
Antivirus
Version 10.0.2.2
Antivirus
Version 10.0.2
Antivirus
Version 10.0.3
Antivirus
Version 10.0.4
Antivirus
Version 10.0.5
Antivirus
Version 10.0.6
Antivirus
Version 10.0.7
Antivirus
Version 10.0.8
Antivirus
Version 10.0.9
Antivirus
Version 10.0
Antivirus
Version 10.0 mr1
Antivirus
Version 10.0 mr2
Antivirus
Version 10.1.0.1
Antivirus
Version 10.1.4.1
Antivirus
Version 10.1.4
Antivirus
Version 10.1.5.1
Antivirus
Version 10.1.5
Antivirus
Version 10.1.6.1
Antivirus
Version 10.1.6
Antivirus
Version 10.1.7
Antivirus
Version 10.1.8
Antivirus
Version 10.1.9
Antivirus
Version 10.1
Antivirus
Version 10.1 mp1
Antivirus
Version 10.1 mr4
Antivirus
Version 10.1 mr5
Antivirus
Version 10.1 mr6
Antivirus
Version 10.1 mr7
Antivirus
Version 10.2
Antivirus
Version 10.2 mr2
Antivirus
Version 10.2 mr3
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Symantec
System Center
Version 10.0
System Center
Version 10.1
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Symantec
Antivirus Central Quarantine Server
Version 3.5
Antivirus Central Quarantine Server
Version 3.6

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.