Unscored severity · published Dec 22, 2014
CVE-2014-7286
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors
–
CVSS
1.2%
EPSS
No
On KEV
Description
Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Deployment Solution · Symantec
through 6.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-7286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-7286
Third Party Advisory
http://www.securityfocus.com/bid/71727
VDB Entry
http://www.securitytracker.com/id/1031421
Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141219_00
More from Deployment Solution
–
CVE-2015-5689
ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs…