Unscored severity · published Feb 6, 2012
CVE-2012-0290
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Altiris Client Management Suite Pcanywhere Solution · Symantec
12.5; 12.5; 12.5; 12.6; 12.6; 12.6 · source: NVD
AD
Altiris Deployment Solution Remote Pcanywhere Solution · Symantec
12.5; 12.5; 12.5; 12.6; 12.6; 12.6 · source: NVD
PC
Pcanywhere · Symantec
through 12.5.3; 5.0; 8.0; 9.2; 10.5; 11.5; +13 more · source: NVD
Affected product
AC
Altiris Client Management Suite Pcanywhere Solution
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0290
secunia.com
http://secunia.com/advisories/48092
www.securityfocus.com
http://www.securityfocus.com/bid/51862
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/72996
More from Altiris Client Management Suite Pcanywhere Solution
–
CVE-2012-0292
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite…
–
CVE-2012-0291
Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0…