CVE-2010-0106: Symantec Antivirus

Low severity, CVSS 1.9. EPSS: 0.6% chance of exploitation in the next 30 days.

The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via "specific events" that prevent the user from having read access to unspecified resources.

Affected products

• Symantec Antivirus: version 10.0 only; version 10.0.1 only; version 10.0.1.1 only; version 10.0.2 only; version 10.0.2.1 only; version 10.0.2.2 only; …
• Symantec Client Security: version 3.0 only; version 3.0.0.359 only; version 3.0.1.1000 only; version 3.0.1.1007 only; version 3.0.1.1008 only; version 3.0.2 only; …
• Symantec Endpoint Protection: version 11.0 only

Published 2010-02-19. Last modified 2026-06-16.