VulnerabilityModified
CVE-2010-2305
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.
HIGH 9.3EPSS 20.0%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.0%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 19.97% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- symantec/sygate personal firewall
- Source
- cve@mitre.org
References
- http://osvdb.org/65539
- http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/Exploit
- http://www.exploit-db.com/exploits/13834Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59408
- http://osvdb.org/65539
- http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/Exploit
- http://www.exploit-db.com/exploits/13834Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59408
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.