CVE Feed

    Dashboard / CVE / CVE-2014-3434

    CVE-2014-3434

    Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.

    Published:Aug 6, 2014
    Last Modified:Apr 12, 2025
    EPS:Aug 6, 2014
    EPSS Score:0.00828
    CVSS Score:6.9

    Affected Products

    Vendor
    Symantec
    Product
    Endpoint Protection

    Exploits

    http://www.exploit-db.com/exploits/34272http://www.securityfocus.com/bid/68946http://www.exploit-db.com/exploits/34272http://www.securityfocus.com/bid/68946https://www.exploit-db.com/exploits/34272

    Related CVEs

    CVE-2025-13919 (CVSS 4.4) — Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to …
    CVE-2025-13918 (CVSS 6.7) — Symantec Endpoint Protection, prior to 14.3 RU10 Patch 1, RU9 Patch 2, and RU8 Patch 3, may be susceptible to …
    CVE-2020-5837 (CVSS 7.8) — Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that a…
    CVE-2020-5836 (CVSS 7.8) — Symantec Endpoint Protection, prior to 14.3, can potentially reset the ACLs on a file as a limited user while …
    CVE-2020-5826 (CVSS 5.5) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…
    CVE-2020-5825 (CVSS 5.5) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…
    CVE-2020-5824 (CVSS 5.5) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…
    CVE-2020-5823 (CVSS 7.8) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…
    CVE-2020-5822 (CVSS 7.8) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…
    CVE-2020-5821 (CVSS 7.8) — Symantec Endpoint Protection (SEP) and Symantec Endpoint Protection Small Business Edition (SEP SBE), prior to…

    References

    http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html
    http://secunia.com/advisories/58996
    http://secunia.com/advisories/59697
    http://www.exploit-db.com/exploits/34272
    http://www.kb.cert.org/vuls/id/252068
    http://www.osvdb.org/109663
    http://www.securityfocus.com/bid/68946
    http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00
    https://exchange.xforce.ibmcloud.com/vulnerabilities/95062
    http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html
    http://secunia.com/advisories/58996
    http://secunia.com/advisories/59697
    http://www.exploit-db.com/exploits/34272
    http://www.kb.cert.org/vuls/id/252068
    http://www.osvdb.org/109663
    http://www.securityfocus.com/bid/68946
    http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00
    https://exchange.xforce.ibmcloud.com/vulnerabilities/95062

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High