CVEvulnerability

CVE-2009-0538

4.6 MEDIUM Published 2009-03-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2009-03-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-134

Description

Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file).

Affected configurations

• symantec pcanywhere (<= 12.5) • symantec pcanywhere 10.0 • symantec pcanywhere 10.5 • symantec pcanywhere 11.0 • symantec pcanywhere 11.0.1 • symantec pcanywhere 11.5 • symantec pcanywhere 11.5.1 • symantec pcanywhere 12.0 • symantec pcanywhere 12.1

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References