Multiple vulnerabilities in pcAnywhere

Description

Multiple serious vulnerabilities have been found in Symantec products. Malicious users can exploit these vulnerabilities to obtain access to client information or cause denial of service. Below is a complete list of vulnerabilities

1. lack of client state control can be exploited remotely by leveraging ‘open client session’;
2. 2. Unknown vectors can be exploited via a specially designed TCP session or response.

Original advisories

Exploitation

Public exploits exist for this vulnerability.

Related products

• Symantec-pcAnywhere

CVE list

• CVE-2012-0292
  critical
• CVE-2012-0291
  critical
• CVE-2012-0290
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com