Vulnerabilites related to Symantec Corporation - Symantec AntiVirus
jvndb-2011-000026
Vulnerability from jvndb
Published
2011-05-13 19:36
Modified
2011-05-13 19:36
Summary
Applications that use the Windows Help function may be vulnerable to privilege escalation
Details
Applications or Services that call the Windows Help function in an insecure manner may allow a user unauthorized access to resrouces on the system.
Applications or Services that call the Windows Help function in an insecure manner may allow a user unauthorized access to resrouces on the system.
This issue may occur in applications or services where the Help function is not called in a secure manner. An example of this is when Anti-virus software or a personal firewall is running on the local system with the privileges of an administrator on the local system, and has an interface to "communicate" with the user.
ISIHARA Takanori reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
{ "@rdf:about": "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000026.html", "dc:date": "2011-05-13T19:36+09:00", "dcterms:issued": "2011-05-13T19:36+09:00", "dcterms:modified": "2011-05-13T19:36+09:00", description: "Applications or Services that call the Windows Help function in an insecure manner may allow a user unauthorized access to resrouces on the system.\r\n\r\nApplications or Services that call the Windows Help function in an insecure manner may allow a user unauthorized access to resrouces on the system.\r\n\r\nThis issue may occur in applications or services where the Help function is not called in a secure manner. An example of this is when Anti-virus software or a personal firewall is running on the local system with the privileges of an administrator on the local system, and has an interface to \"communicate\" with the user.\r\n\r\nISIHARA Takanori reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.", link: "https://jvndb.jvn.jp/en/contents/2011/JVNDB-2011-000026.html", "sec:cpe": [ { "#text": "cpe:/a:symantec:antivirus", "@product": "Symantec AntiVirus", "@vendor": "Symantec Corporation", "@version": "2.2", }, { "#text": "cpe:/a:symantec:norton_antivirus", "@product": "Norton AntiVirus", "@vendor": "Symantec Corporation", "@version": "2.2", }, { "#text": "cpe:/a:symantec:symantec_client_security", "@product": "Symantec Client Security", "@vendor": "Symantec Corporation", "@version": "2.2", }, ], "sec:cvss": { "@score": "7.2", "@severity": "High", "@type": "Base", "@vector": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "@version": "2.0", }, "sec:identifier": "JVNDB-2011-000026", "sec:references": [ { "#text": "http://jvn.jp/en/jp/JVN63898867", "@id": "JVN#63898867", "@source": "JVN", }, { "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1540", "@id": "CVE-2002-1540", "@source": "CVE", }, { "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2017", "@id": "CVE-2005-2017", "@source": "CVE", }, { "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2002-1540", "@id": "CVE-2002-1540", "@source": "NVD", }, { "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2005-2017", "@id": "CVE-2005-2017", "@source": "NVD", }, { "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html", "@id": "CWE-264", "@title": "Permissions(CWE-264)", }, ], title: "Applications that use the Windows Help function may be vulnerable to privilege escalation", }