Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*

part: a version: 10.0 update: mr1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductAntivirus (9d6d834c-74f1-5144-a6ea-bf6ba71a983d)
Editioncorporate
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-0688 vulnerable 2026-06-08 04:56:38.660164 Details available
Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.
Published: 2011-01-31T20:00:00.000Z
Updated: 2024-08-06T21:58:26.105Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0111 vulnerable 2026-06-08 04:51:53.016192 Details available
HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call.
Published: 2011-01-31T20:00:00.000Z
Updated: 2024-08-07T00:37:53.893Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-0110 vulnerable 2026-06-08 04:51:53.002588 Details available
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.
Published: 2011-01-31T20:00:00.000Z
Updated: 2024-08-07T00:37:54.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3104 vulnerable 2026-06-08 04:51:32.357880 Details available
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before MR8, and 10.2 before MR3; and Client Security 2.0 before MR7, 3.0, and 3.1 before MR8; when Internet Email Scanning is installed and enabled, allows remote attackers to cause a denial of service (CPU consumption and persistent connection loss) via unknown attack vectors.
Published: 2009-09-08T22:00:00.000Z
Updated: 2024-08-07T06:14:56.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.