Login Request a demo
Unscored severity · published Apr 30, 2009
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Symantec
10.1; 10.1; 10.2; 10.2 · source: NVD
CS
Client Security · Symantec
3.1; 3.1 · source: NVD
EP
Endpoint Protection · Symantec
11.0; 11.0 · source: NVD
Affected product
AN
Antivirus
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1432
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1432
Third Party Advisory
http://secunia.com/advisories/34856
Third Party Advisory
http://secunia.com/advisories/34935
Third Party Advisory
http://securitytracker.com/id?1022136
Third Party Advisory
http://securitytracker.com/id?1022137
Third Party Advisory
http://securitytracker.com/id?1022138
Third Party Advisory
http://www.securityfocus.com/bid/34668
More from Antivirus
–
CVE-2012-4953
The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and…
–
CVE-2011-0688
Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec…
–
CVE-2010-0111
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate…
–
CVE-2010-0110
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec…
–
CVE-2010-3268
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as…