CVE-2018-12244

2019-04-2518:49:02

symantec

www.cve.org

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

31.0%

JSON

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.

CNA Affected

[
  {
    "product": "Symantec Endpoint Protection (Mac Client)",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to and including 12.1 RU6 MP9"
      },
      {
        "status": "affected",
        "version": "Prior to 14.2 RU1"
      }
    ]
  }
]

References

support.symantec.com/en_US/article.SYMSA1479.html

www.securityfocus.com/bid/107999