Symantec Mail Security KeyView Filter Memory Corruption Errors Let Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1024262 |
|
SecurityTracker URL: http://securitytracker.com/id?1024262
|
|
CVE Reference:
CVE-2010-0126, CVE-2010-0131, CVE-2010-0133, CVE-2010-0134, CVE-2010-0135, CVE-2010-1524, CVE-2010-1525
(Links to External Site)
|
Date: Jul 29 2010
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
|
Description:
Several vulnerabilities were reported in Symantec Mail Security. A remote user can cause arbitrary code to be executed on the target system.
A remote user can create a specially crafted file that, when processed by the target application, will trigger a memory corruption error and execute arbitrary code on the target system.
Symantec Mail Security for Domino versions 7.5.x and 8.0.x are affected.
Symantec Mail Security for Domino version MPE 3.2 and version SMSDOM 5.1 are not affected.
Symantec Mail Security for Microsoft Exchange 6.0.x versions prior to version 6.0.5 are not affected.
Carsten Eiram and Dyon Balding of Secunia Research reported these vulnerabilities.
|
Impact:
A remote user can create a file that, when processed by the target application, will execute arbitrary code on the target system.
|
Solution:
The vendor has issued a fix (SMSDOM 8.0.6, SMSDOM 7.5.10, SMSMSE 6.0.11, SMSMSE 6.5.1).
The vendor's advisory is available at:
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
|
Vendor URL: www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01 (Links to External Site)
|
Cause:
Access control error, Boundary error
|
Underlying OS:
Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 29 Jul 2010 03:32:28 +0000
Subject: Symantec Mail Security
|
Security Advisories Relating to Symantec Products - Multi-Vendor Autonomy KeyView Filter Multiple Security Issues
http://www.symantec.com/business/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01
CVE-2010-0126
CVE-2010-0131
CVE-2010-0133
CVE-2010-0134
CVE-2010-0135
CVE-2010-1524
CVE-2010-1525
|
|
