Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2010-3268
Modified
More InfoOfficial Page
Source-cve@mitre.org
View Known Exploited Vulnerability (KEV) details
Published At-22 Dec, 2010 | 21:00
Updated At-29 Apr, 2026 | 01:13

The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary2.05.0MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
Type: Primary
Version: 2.0
Base score: 5.0
Base severity: MEDIUM
Vector:
AV:N/AC:L/Au:N/C:N/I:N/A:P
CPE Matches
Intel Corporation
intel
>>intel_alert_management_system>>*
cpe:2.3:a:intel:intel_alert_management_system:*:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>antivirus>>10.1.4.4010
cpe:2.3:a:symantec:antivirus:10.1.4.4010:*:corporate:*:*:*:*:*
Microsoft Corporation
microsoft
>>windows_2000>>-
cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:rtm:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.1
cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.1
cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.1
cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp2:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.2
cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.2
cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.2
cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.4
cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.4
cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.4
cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:*
Symantec Corporation
symantec
>>endpoint_protection>>11.0.3001
cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-20Primarynvd@nist.gov
CWE ID: CWE-20
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
http://secunia.com/advisories/42593cve@mitre.org
Vendor Advisory
http://secunia.com/advisories/43099cve@mitre.org
N/A
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-doscve@mitre.org
Exploit
http://www.securityfocus.com/archive/1/515191/100/0/threadedcve@mitre.org
N/A
http://www.securityfocus.com/bid/45936cve@mitre.org
N/A
http://www.securitytracker.com/id?1024866cve@mitre.org
N/A
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00cve@mitre.org
N/A
http://www.vupen.com/english/advisories/2010/3206cve@mitre.org
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0234cve@mitre.org
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64028cve@mitre.org
N/A
http://secunia.com/advisories/42593af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://secunia.com/advisories/43099af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dosaf854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/archive/1/515191/100/0/threadedaf854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securityfocus.com/bid/45936af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.securitytracker.com/id?1024866af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00af854a3a-2127-422b-91ae-364da2661108
N/A
http://www.vupen.com/english/advisories/2010/3206af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0234af854a3a-2127-422b-91ae-364da2661108
N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/64028af854a3a-2127-422b-91ae-364da2661108
N/A
Hyperlink: http://secunia.com/advisories/42593
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/43099
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos
Source: cve@mitre.org
Resource:
Exploit
Hyperlink: http://www.securityfocus.com/archive/1/515191/100/0/threaded
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/45936
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1024866
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2010/3206
Source: cve@mitre.org
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2011/0234
Source: cve@mitre.org
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64028
Source: cve@mitre.org
Resource: N/A
Hyperlink: http://secunia.com/advisories/42593
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://secunia.com/advisories/43099
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Exploit
Hyperlink: http://www.securityfocus.com/archive/1/515191/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securityfocus.com/bid/45936
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.securitytracker.com/id?1024866
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: http://www.vupen.com/english/advisories/2010/3206
Source: af854a3a-2127-422b-91ae-364da2661108
Resource:
Vendor Advisory
Hyperlink: http://www.vupen.com/english/advisories/2011/0234
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/64028
Source: af854a3a-2127-422b-91ae-364da2661108
Resource: N/A
Change History
0Changes found
Details not found