CVE-2012-4953 | BDVDB-2026-53430 Detail

Description#

The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine (SSE) before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121107_00
http://www.kb.cert.org/vuls/id/985625
http://www.securitytracker.com/id?1027726
http://www.securityfocus.com/bid/56399

Exploit#

No public exploit known

History#

Version 12012-11-14Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.