CVE-2010-0108

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 19.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-02-19 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function.

Affected products

Symantec Antivirus: 10.0, 10.0.1, 10.0.1.1, 10.0.2, 10.0.2.1, 10.0.2.2 (+23)
Symantec Client Security: 3.0, 3.0-mr1, 3.0-mr2, 3.0.0.359, 3.0.1.1000, 3.0.1.1007 (+17)
Symantec Endpoint Protection: 11.0

References

http://dsecrg.com/pages/vul/show.php?id=139
http://secunia.com/advisories/38651
http://www.securityfocus.com/archive/1/509681/100/0/threaded
http://www.securityfocus.com/bid/38222
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02
http://www.vupen.com/english/advisories/2010/0412
https://exchange.xforce.ibmcloud.com/vulnerabilities/56355
http://dsecrg.com/pages/vul/show.php?id=139
http://secunia.com/advisories/38651
http://www.securityfocus.com/archive/1/509681/100/0/threaded
http://www.securityfocus.com/bid/38222
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02

Get alerted when CVE-2010-0108 or the next vulnerability affects your stack