CVEvulnerability

CVE-2014-3434

6.9 MEDIUM Published 2014-08-06 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.

Affected configurations

• symantec endpoint protection 11.0 • symantec endpoint protection 12.0 • symantec endpoint protection 12.1

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References