What’s Vulnerable › Vulnerabilities

CVE-2012-0292

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2012-03-08 · updated 2026-06-16
• Weakness: CWE-20

Description

The awhost32 service in Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) allows remote attackers to cause a denial of service (daemon crash) via a crafted TCP session on port 5631.

Affected products

• Symantec Altiris Client Management Suite Pcanywhere Solution: 7.0
• Symantec Altiris Climentent Manage Suite Pcanywhere Solution: 7.1
• Symantec Altiris Deployment Solution Remote Pcanywhere Solution: 7.1
• Symantec Altiris It Management Suite Pcanywhere Solution: 7.0, 7.1
• Symantec Pcanywhere: through 12.5; 10.0, 10.5, 11.0, 11.0.1, 11.5, 11.5.1 (+11)

References

• http://secunia.com/advisories/48092
• http://www.exploit-db.com/exploits/18493/
• http://www.securityfocus.com/bid/52094
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00
• http://secunia.com/advisories/48092
• http://www.exploit-db.com/exploits/18493/
• http://www.securityfocus.com/bid/52094
• http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120301_00

Get alerted when CVE-2012-0292 or the next vulnerability affects your stack