Unscored severity · published Dec 22, 2010
CVE-2010-3268
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as…
–
CVSS
3.3%
EPSS
No
On KEV
Description
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
Antivirus · Symantec
10.1.4.4010 · source: NVD
EP
Endpoint Protection · Symantec
11.0; 11.0; 11.0; 11.0; 11.0; 11.0; +11 more · source: NVD
IA
Intel Alert Management System · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-3268
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-3268
Vendor Advisory
http://secunia.com/advisories/42593
secunia.com
http://secunia.com/advisories/43099
Exploit
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos
www.securityfocus.com
http://www.securityfocus.com/archive/1/515191/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/45936
www.securitytracker.com
http://www.securitytracker.com/id?1024866