Title

Symantec Scan Engine Memory Corruption Vulnerability (Cat I impact)

Discussion

Symantec has released a security advisory addressing a vulnerability in Symantec Scan Engine (SSE). To exploit this vulnerability, an unauthorized attacker would create a malicious file containing machine code, replacement memory addresses, and/or NOP instructions, distribute it via email and entice a user to open it. If successfully exploited, this vulnerability would allow an unauthorized remote attacker to execute arbitrary code in the context of the application or cause a denial-of-service condition.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-35030

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.