GCVE - cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:pcanywhere:11.5.1:*:*:*:*:*:*:*

part: a version: 11.5.1 update: *

Vendor	Symantec (`88d7b611-7ce9-5631-abc6-1312dc87ce23`)
Product	Pcanywhere (`a5977b80-1387-5234-aeb0-0f22ee84f6ef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2012-0292`	vulnerable	2026-06-08 05:00:40.584870	Details available The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631. Published: 2012-03-08T02:00:00.000Z Updated: 2024-08-06T18:23:29.362Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/52094 http://www.exploit-db.com/exploits/18493/ http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0291`	vulnerable	2026-06-08 05:00:40.573584	Details available Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allow remote attackers to cause a denial of service (application crash or hang) via (1) malformed data from a client, (2) malformed data from a server, or (3) an invalid response. Published: 2012-02-22T11:00:00.000Z Updated: 2024-08-06T18:23:30.070Z Open on db.gcve.eu Reference links http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 http://www.securityfocus.com/bid/51965 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-0290`	vulnerable	2026-06-08 05:00:40.555632	Details available Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session." Published: 2012-02-06T20:00:00.000Z Updated: 2024-08-06T18:23:29.301Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/51862 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00 https://exchange.xforce.ibmcloud.com/vulnerabilities/72996 http://secunia.com/advisories/48092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0538`	vulnerable	2026-06-08 04:51:09.894726	Details available Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file). Published: 2009-03-18T15:00:00.000Z Updated: 2024-08-07T04:40:05.050Z Open on db.gcve.eu Reference links http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html http://www.securityfocus.com/bid/33845 http://secunia.com/advisories/34305 http://securitytracker.com/id?1021855 https://exchange.xforce.ibmcloud.com/vulnerabilities/49291	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2619`	vulnerable	2026-06-08 04:49:45.573738	Details available Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785. Published: 2007-05-11T16:00:00.000Z Updated: 2024-08-07T13:42:33.856Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/34203 http://www.vupen.com/english/advisories/2007/1753 http://osvdb.org/41982 http://securityresponse.symantec.com/avcenter/security/Content/2007.05.09b.html http://securitytracker.com/id?1018032	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3934`	vulnerable	2026-06-08 04:48:42.678429	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.