CVE-2010-0111 | BDVDB-2026-44889 Detail
Description#
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://secunia.com/advisories/43099
- http://www.zerodayinitiative.com/advisories/ZDI-11-029
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64943
- http://secunia.com/advisories/43106
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64942
- http://www.securityfocus.com/bid/45935
- http://www.vupen.com/english/advisories/2011/0234
- http://securitytracker.com/id?1024997
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.