CVE-2024-23617 — Symantec Data Loss Prevention Buffer Overflow

CVE-2024-23617

Symantec Data Loss Prevention Buffer Overflow PUBLISHED

Description (CNA)

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

Affected (CNA)

Vendor / product	Versions
Symantec / Data Loss Prevention	affected 12.0 through 14.0.2

CWE

CWE-119

References

https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execution/

ADP enrichment

CVE

No English description supplied.

https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execution/

CISA-ADP

No English description supplied.

No references supplied.