VDB
CVE-2014-3434
CVE-2014-3434
PUBLISHED
CVSS 6.900000095367432 MEDIUM
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.
EPSS 0.63% · 70.7th percentile
Risk Scores
CVSS 2.0
6.900000095367432
EPSS Score
0.63%
70.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| symantec | endpoint_protection | 12.0, 12.1, 11.0 |
Timeline
- CVE Published
- Aug 6, 2014 PoC Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 25, 2023 EPSS Score
References
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00 url
- 109663 vdb
- 68946 vdb
- symantec-endpoint-priv-escalation(95062) vdb
- VU#252068 third-party-advisory
- 58996 third-party-advisory
- 59697 third-party-advisory
- 34272 exploit
- http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html url
- https://nvd.nist.gov/vuln/detail/CVE-2014-3434 advisory