CVE-2010-0110
Estado: ModificadaAlta (7.9)—
Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.
CVSS
- Versión: 2.0
- Vector: AV:A/AC:M/Au:N/C:C/I:C/A:C
- Puntuación base: 7.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 5.13%
- Percentil entre todas las CVEs puntuadas: 92
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-119
Referencias
- http://secunia.com/advisories/43099
- http://secunia.com/advisories/43106
- http://securitytracker.com/id?1024996
- http://www.securityfocus.com/bid/45936
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
- http://www.vupen.com/english/advisories/2011/0234
- http://www.zerodayinitiative.com/advisories/ZDI-11-028
- http://www.zerodayinitiative.com/advisories/ZDI-11-030
- http://www.zerodayinitiative.com/advisories/ZDI-11-031
- http://www.zerodayinitiative.com/advisories/ZDI-11-032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64940
- http://secunia.com/advisories/43099
- http://secunia.com/advisories/43106
- http://securitytracker.com/id?1024996
- http://www.securityfocus.com/bid/45936
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
- http://www.vupen.com/english/advisories/2011/0234
- http://www.zerodayinitiative.com/advisories/ZDI-11-028
- http://www.zerodayinitiative.com/advisories/ZDI-11-030
- http://www.zerodayinitiative.com/advisories/ZDI-11-031
- http://www.zerodayinitiative.com/advisories/ZDI-11-032
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64940
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-0110",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.9,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:M/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "MEDIUM",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 5.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-01-31T21:00:01.610",
"references": [
{
"url": "http://secunia.com/advisories/43099",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/43106",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1024996",
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/45936",
"source": "cve@mitre.org"
},
{
"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0234",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-028",
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-030",
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-031",
"source": "cve@mitre.org"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-032",
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64940",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/43099",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/43106",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1024996",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/45936",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0234",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-028",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-030",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-031",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.zerodayinitiative.com/advisories/ZDI-11-032",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64940",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service."
},
{
"lang": "es",
"value": "Múltiples desbordamientos de búfer basados en pila en Intel Alert Management System (también conocido como AMS o AMS2), como es usado en Symantec AntiVirus Corporate Edition (SAVCE) v10.x anterior a v10.1 MR10, Symantec System Center (SSC) v10.x,y Symantec Quarantine Server v3.5 y v3.6, permite a atacantes remotos ejecutar código de su elección a través de (1) una cadena larga para msgsys.exe, relacionada con la función AMSSendAlertAct en AMSLIB.dll en el servicio Intel Alert Handler (también conocido como servicio Symantec Intel Handler); una larga (2)cadena modem o (3) número PIN para msgsys.exe, relacionado con pagehndl.dll en el servicio Intel Alert Handler; o (4) un mensaje para msgsys.exe, relacionado con iao.exe en el servicio Intel Alert Originator ."
}
],
"lastModified": "2026-06-16T23:15:29.633",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEB639EF-B434-42ED-A162-A2593FA78E3E"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0048A5E9-B07B-44BE-B79C-A37DBE96592A"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "436B467D-0C3C-44FF-A900-431197CA9033"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BA427D2-2F74-4314-B68A-164E2B6B0240"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "549049F7-2698-4F68-A1D0-1E4546B9EB23"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.1.2:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFAA2B2E-0902-4F86-8076-34ED2ECBF02E"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E86D9CE-8A86-498B-B3A3-8988274A91E5"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBF13A92-83EF-44EE-AD87-BA0CF8FF266D"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D92B456D-A69E-4B10-8F74-D3DFC242F641"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "643AF180-138C-472A-8BC5-B8B028E77CDD"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D56068D-CEF2-46B7-9914-36AB961839C9"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C8ADDF27-67FF-41D7-BF2E-87AE06FDECD7"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "002290DD-589E-404F-BFC0-A1239D0E92E3"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D2854BCF-2D37-4BE9-A590-7E25DF443EFF"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4BDB19A7-8DFA-43AD-9C44-16BBCF4531B7"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED683B68-530A-436F-A49B-32890EDFAC93"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09C311A9-7F82-46C1-8A69-49C2890B1CFC"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9ADCB5F2-CCE8-4123-8E7E-EAF4885FD482"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6110CF45-3C3D-4560-A8F3-A5C47CD5265F"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1F6FC33-2929-45A3-9AD1-057456EC366E"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "084FCB30-F79A-45D0-B310-F3DB20EE3D2E"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B24D11E4-5927-4C3D-BBEB-21DC2990122F"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "519B2E1C-FF02-4A40-804F-BCCB2B6CB57F"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6DF07665-8AC8-405F-AF51-216C7A6F0ACB"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3CF7C8DB-1045-4226-9576-063A8A95518F"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DCC51E7C-9D45-4B95-95B1-2105F6812620"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A243CF7B-193D-481D-8518-5F711064D9B6"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7F8ED8F-E857-4290-844A-8F1ADE383C4F"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCFA7D6F-103F-49DD-93AD-9C19AAE44BFE"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D1C41837-80A2-48A4-A093-EC6478120216"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.8:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9459B9EC-73C2-4A4F-A6C8-91AF68FDF850"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.1.9:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9A34C41-CCFE-4F3D-B2A2-FF63339BFC56"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94E10F15-5F41-4B6B-9C42-7ED34E8420C5"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8F35EA2A-B446-446F-8FDE-1C09D9A73687"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "782569C8-2244-4B8C-9D8E-0C37456278F1"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:system_center:10.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "853171A9-1DD8-4C49-9564-956FB030DEC6"
},
{
"criteria": "cpe:2.3:a:symantec:system_center:10.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EED74697-A20C-47F0-9CF6-605981B2675F"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2B4436C-B67A-4904-80B3-1BE419E56699"
},
{
"criteria": "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22949831-311A-4A92-B358-0F43971DBAAE"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}