Description
Format string vulnerability in Symantec pcAnywhere before 12.5 SP1 allows local users to read and modify arbitrary memory locations, and cause a denial of service (application crash) or possibly have unspecified other impact, via format string specifiers in the pathname of a remote control file (aka .CHF file).
References
- http://securityresponse.symantec.com/avcenter/security/Content/2009.03.17.html
- 33845 vdb-entry
- 34305 third-party-advisory
- 1021855 vdb-entry
- symantec-pcanywhere-unspecified-dos(49291) vdb-entry
- 52797 vdb-entry
- ADV-2009-0755 vdb-entry
- 20090318 Layered Defense Research Advisory: Format String Vulnerablity in Symantec PcAnywhere v10-12.5 mailing-list
- http://www.layereddefense.com/pcanywhere17mar.html