CVE-2014-3434 in Endpoint Protection
Summary
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
05/09/2014
Disclosure
08/06/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67284 | Symantec Endpoint Protection Application/Device Control memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2014-3434 |