CVE-2014-7286

2014-12-2215:59:00

CWE-119

symantec

web.nvd.nist.gov

symantec

deployment solution

buffer overflow

aclient

cve-2014-7286

windows xp

server 2003

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.001

Percentile

27.0%

JSON

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

symantecdeployment_solutionRange≤6.9

AND

microsoftwindows_server_2003

microsoftwindows_xp

VendorProductVersionCPE
symantecdeployment_solution*cpe:2.3:a:symantec:deployment_solution:*:*:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	deployment_solution	*	cpe:2.3:a:symantec:deployment_solution::::::::
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::::::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::::::::