CVE-2024-23617

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

Score

CVSS 3.1 9.6 Critical

Status

Modified - disclosures@exodusintel.com

Published

2024-01-26

Last modified

2024-10-18

Weaknesses

CWE-119, CWE-120

Affected products

• Symantec Data Center Security Server (Broadcom)
• Data Loss Prevention (Symantec)

References

• https://blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execu…