CVE Feed

    Dashboard / CVE / CVE-2010-2305

    CVE-2010-2305

    Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method.

    Published:Jun 16, 2010
    Last Modified:Apr 11, 2025
    EPS:Jun 16, 2010
    EPSS Score:0.06151
    CVSS Score:9.3

    Affected Products

    Vendor
    Symantec
    Product
    Sygate Personal Firewall

    Exploits

    http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/http://www.exploit-db.com/exploits/13834http://www.corelan.be:8800/index.php/forum/security-advisories/10-050-sygate-personal-firewall-5-6-build-2808-activex/http://www.exploit-db.com/exploits/13834https://www.exploit-db.com/exploits/13834

    Related CVEs

    CVE-2006-6623 (CVSS 7.2) — Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block (PEB) to identify a process, which a…
    CVE-2006-6620 (CVSS 7.2) — Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block (PEB) to identify a process, which a…
    CVE-2006-6618 (CVSS 7.2) — AntiHook 3.0.0.23 - Desktop relies on the Process Environment Block (PEB) to identify a process, which allows …
    CVE-2006-6621 (CVSS 7.2) — Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block (PEB) to identify a process, wh…
    CVE-2006-6622 (CVSS 7.2) — Soft4Ever Look 'n' Stop (LnS) 2.05p2 before 20061215 relies on the Process Environment Block (PEB) to identify…
    CVE-2006-6619 (CVSS 7.2) — AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block (PEB) to identify a process, whic…
    CVE-2002-2397 (CVSS 10) — Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High