Improper input validation in Intel Alert Management System
CVE-2010-3268
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.033 (88.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 88th percentile — 88.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.033 · newest: 0.033 · change: 0.000
Affected products
- Intel Alert Management System
- Microsoft Windows 2000
- Symantec Antivirus — versions 10.1.4.4010
- Symantec Endpoint Protection — versions 11.0, 11.0.4, 11.0.3001
Weakness classification (CWE)
References
- www.securityfocus.com/archive/1/515191/100/0/threaded (mailing-list)
- secunia.com/advisories/43099 (third-party-advisory)
- www.symantec.com/security_response/securityupdates/detail.jsp
- www.vupen.com/english/advisories/2010/3206 (vdb-entry, Vendor Advisory)
- www.coresecurity.com/content/symantec-intel-handler-service-remote-dos (Exploit)
- secunia.com/advisories/42593 (Vendor Advisory, third-party-advisory)
- www.securitytracker.com/id (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/64028 (vdb-entry)
- www.securityfocus.com/bid/45936 (vdb-entry)
- www.vupen.com/english/advisories/2011/0234 (vdb-entry)