CVE-2009-0538

Related Files

Symantec PcAnywhere 10 Format String

Posted Mar 19, 2009

Authored by Deral Heiland | Site layereddefense.com

Layered Defense Research Advisory - A local format string vulnerability was discovered within Symantec PcAnywhere version 10 thru 12.5. The vulnerability is due to improper processing of format strings within (.CHF) remote control file names or associated file path. When special crafted format strings are entered as the file name (%s%s%s%s%s.chf) or within the path of the CHF file the format string vulnerability is triggered. Making it possible to read/write arbitrary memory and at a minimum cause a denial of service condition.

tags | advisory, remote, denial of service, arbitrary, local

advisories | CVE-2009-0538

SHA-256 | a574bab9b99dda07703b1bfb56b0731c44ceff88c536d3484eab091eb2e196a5

Download | Favorite | View