NVD

Id
40479  
Name
CVE-2013-5011  
Description
Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-01-10  
Modified Date
2014-01-27  
Seq
2013-5011  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205395 40479 CVE-2013-5011 64130  View
205396 40479 CVE-2013-5011 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00  View
205397 40479 CVE-2013-5011 symantec-endpoint-cve20135011-priv-esc(90226)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12154 JVNDB-2014-001029 Symantec Endpoint Protection および Endpoint Protection Small Business Edition における権限を取得される脆弱性 Symantec Endpoint Protection (SEP) および Endpoint Protection Small Business Edition のクライアントには、引用符で囲まれていない Windows 検索パスにより、権限を取得される脆弱性が存在します。 CVE-2013-5011 64953 CVE-2013-5011 40479 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001029.html 2014-01-09 2014-01-14 View