CVE-2014-3434: Buffer Overflow

Published Aug 6, 2014

Updated

Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.

Affected Software

3 affected components

Symantec Endpoint Protection=11.0

Symantec Endpoint Protection=12.0

Symantec Endpoint Protection=12.1

Event History

Aug 6, 2014

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-3434?

CVE-2014-3434 is considered critical due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2014-3434?

To fix CVE-2014-3434, update Symantec Endpoint Protection to version 12.1 RU4 MP1b or later.

Which versions of Symantec Endpoint Protection are affected by CVE-2014-3434?

CVE-2014-3434 affects Symantec Endpoint Protection versions 11.x, 12.x before 12.1 RU4 MP1b, and the Small Business Edition before SEP 12.1.

What type of vulnerability is CVE-2014-3434?

CVE-2014-3434 is a buffer overflow vulnerability that can be exploited via a malicious IOCTL call.

Can CVE-2014-3434 be exploited remotely?

CVE-2014-3434 requires local access to exploit, as it is triggered through local user actions.