CVE-2010-3268: Input Validation
The GetStringAMSHandler function in prgxhndl.dll in hndlrsvc.exe in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (AMS), as used in Symantec Antivirus Corporate Edition 10.1.4.4010 on Windows 2000 SP4 and Symantec Endpoint Protection before 11.x, does not properly validate the CommandLine field of an AMS request, which allows remote attackers to cause a denial of service (application crash) via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3268?
CVE-2010-3268 has a high severity rating as it can lead to a remote denial of service.
How do I fix CVE-2010-3268?
To fix CVE-2010-3268, you should update to the latest version of Symantec Endpoint Protection or Symantec Antivirus that addresses this vulnerability.
What systems are affected by CVE-2010-3268?
CVE-2010-3268 affects specific versions of Symantec Endpoint Protection and Symantec Antivirus running on Windows 2000 SP4.
Is CVE-2010-3268 a critical vulnerability?
Yes, CVE-2010-3268 is considered critical due to its potential to cause significant disruption to service.
Who is responsible for addressing CVE-2010-3268?
The responsibility for addressing CVE-2010-3268 lies with the users of the affected Symantec software to apply the necessary updates.