blog.exodusintel.comThird-party advisory
https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execution CVE-2024-23617
CRITICAL
Symantec Data Loss Prevention Buffer Overflow
Record summary
CVE-2024-23617 has a selected CVSS score of 9.6 (critical).
Description
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 29, 2024 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Data Loss PreventionBrowse Symantec / Data Loss PreventionDefault status: unaffected | CVE List | 12.0 to ≤ 14.0.2 | affected |
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2024-23617