CVE-2010-0108: Symantec Antivirus

High severity, CVSS 10.0. EPSS: 19.4% chance of exploitation in the next 30 days.

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

Affected products

• Symantec Antivirus: version 10.0 only; version 10.0.1 only; version 10.0.1.1 only; version 10.0.2 only; version 10.0.2.1 only; version 10.0.2.2 only; …
• Symantec Client Security: version 3.0 only; version 3.0.0.359 only; version 3.0.1.1000 only; version 3.0.1.1007 only; version 3.0.1.1008 only; version 3.0.2 only; …
• Symantec Endpoint Protection: version 11.0 only

Published 2010-02-19. Last modified 2026-06-16.