Buffer overflow in Symantec Endpoint Protection Center

CVE-2013-1612

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.044 (90.3th percentile) — read the EPSS interpretation.

Affected products

Symantec Endpoint_protection_center — versions 12.0.0, 12.0.1
Symantec Endpoint_protection_manager — versions 12.1.0, 12.1.1, 12.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secure@symantec.com (x_refsource_CONFIRM)
secure@symantec.com (vdb-entry, x_refsource_BID)