CVE-2012-0292: Input Validation
The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0292?
CVE-2012-0292 has a severity rating of high due to its potential exploitation leading to unauthorized access.
How do I fix CVE-2012-0292?
To fix CVE-2012-0292, users should apply the latest security patches provided by Symantec for affected versions of pcAnywhere.
Which versions are affected by CVE-2012-0292?
CVE-2012-0292 affects Symantec pcAnywhere versions up to and including 12.5.3, as well as specific versions of Altiris IT Management Suite and Client Management Suite.
What type of vulnerability is CVE-2012-0292?
CVE-2012-0292 is categorized as a local privilege escalation vulnerability.
Can CVE-2012-0292 be exploited remotely?
Yes, CVE-2012-0292 can potentially be exploited remotely under certain conditions.