Symantec Antivirus vulnerabilities

15 CVEs affecting Symantec Antivirus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-4953, published 2012-11-14.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-1429, published 2009-04-29. High severity, CVSS 10.0. EPSS: 87.7% chance of exploitation in the next 30 days. The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine…
CVE-2009-1430, published 2009-04-29. High severity, CVSS 9.3. EPSS: 55.1% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus…
CVE-2010-0111, published 2011-01-31. High severity, CVSS 9.3. EPSS: 34.5% chance of exploitation in the next 30 days. HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x…
CVE-2010-0108, published 2010-02-19. High severity, CVSS 10.0. EPSS: 19.4% chance of exploitation in the next 30 days. Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client…
CVE-2009-1431, published 2009-04-29. High severity, CVSS 9.3. EPSS: 8% chance of exploitation in the next 30 days. XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central…
CVE-2012-4953, published 2012-11-14. High severity, CVSS 9.3. EPSS: 6% chance of exploitation in the next 30 days. The decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition (SAVCE) 10.x, and Symantec Scan Engine…
CVE-2010-0110, published 2011-01-31. High severity, CVSS 7.9. EPSS: 5.1% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC)…
CVE-2009-1432, published 2009-04-30. Medium severity, CVSS 5.0. EPSS: 4.2% chance of exploitation in the next 30 days. Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec…
CVE-2011-0688, published 2011-01-31. High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days. Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5…
CVE-2010-3268, published 2010-12-22. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec…

Latest

CVE-2010-0106, published 2010-02-19. Low severity, CVSS 1.9. EPSS: 0.6% chance of exploitation in the next 30 days. The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote…
CVE-2009-3104, published 2009-09-08. Medium severity, CVSS 4.3. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2…