CVE-2019-12750: symantec endpoint_protection Out-of-bounds Read

Vulnerability summary

CVE-2019-12750 is a high (CVSS 7.8) Out-of-bounds Read vulnerability in symantec endpoint_protection. EPSS estimates a 1.25% chance of exploitation in the next 30 days, higher than 69.1% of scored vulnerabilities.

Timeline

1. 31-07-2019
   PublishedVulnerability first disclosed.
2. 04-08-2024
   Last modifiedVulnerability information updated.

Description

Symantec Endpoint Protection, prior to 14.2 RU1 & 12.1 RU6 MP10 and Symantec Endpoint Protection Small Business Edition, prior to 12.1 RU6 MP10c (12.1.7491.7002), may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.