Intrusion PreventionSymantec.Antivirus.Real.Time.Virus.Scan.Service.Buffer.Overflow
Description
This indicates a possible exploit of a Buffer Overflow vulnerability in Symantec Antivirus and Client Security.
The issue allows remote attackers to execute arbitrary machine code with "SYSTEM" level privileges, facilitating the complete compromise of affected computers.
Affected Products
Symantec Client Security 3.1.400
Symantec Client Security 3.1.394
Symantec Client Security 3.0.2.2020
Symantec Client Security 3.0.2.2010
Symantec Client Security 3.0.2.2001
Symantec Client Security 3.0.2.2000
Symantec Client Security 3.0
Symantec Client Security 3.1
Symantec AntiVirus Corporate Edition 10.1.400
Symantec AntiVirus Corporate Edition 10.1.394
Symantec AntiVirus Corporate Edition 10.0.2.2020
Symantec AntiVirus Corporate Edition 10.0.2.2010
Symantec AntiVirus Corporate Edition 10.0.2.2001
Symantec AntiVirus Corporate Edition 10.0.2.2000
Symantec AntiVirus Corporate Edition 10.0
Symantec AntiVirus Corporate Edition 10.1
Impact
System Compromise: Arbitrary code can be executed on vulnerable systems.
Recommended Actions
Apply the patch avalable from the vendor:
http://www.symantec.com/techsupp/enterprise/select_product_updates.html
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 29149 |
| Created | Sep 19, 2011 |
| Updated | Apr 23, 2014 |
| Risk |
|
| CVE ID | CVE-2006-2630 |
| Exploit Prediction Score | 97.11% |
| Default Action | drop |
| Active | |
| Affected OS | Windows |
| Affected App | Other |