製品・ソフトウェアに関する情報

JVN脆弱性詳細

Symantec AntiVirus などのオンデマンドスキャンにおけるサービス運用妨害 (DoS) の脆弱性

Title	Symantec AntiVirus などのオンデマンドスキャンにおけるサービス運用妨害 (DoS) の脆弱性
Summary	Symantec AntiVirus および Client Security のオンデマンドスキャンには、Tamper プロテクションが無効になっている際、サービス運用妨害 (オンデマンドスキャンの阻止) 状態となる脆弱性が存在します。
Possible impacts	第三者により、"特定のイベント" を介して、ユーザに不特定のリソースへの読み込みアクセス権を制限され、サービス運用妨害 (オンデマンドスキャンの阻止) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Feb. 17, 2010, midnight
Registration Date	Dec. 20, 2012, 7:28 p.m.
Last Update	Dec. 20, 2012, 7:28 p.m.

CVSS2.0 : 注意
Score	1.9
Vector	AV:L/AC:M/Au:N/C:N/I:N/A:P

Affected System

シマンテック

client security 3.0.x および MR9 未満の 3.1.x

Symantec AntiVirus 10.0.x、MR9 未満の 10.1.x、および 10.2.x

Symantec Endpoint Protection

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2010-0106	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0106
National Vulnerability Database (NVD)
2	CVE-2010-0106	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-0106

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-Other	https://www.ipa.go.jp/security/vuln/CWE.html#CWEOther

ベンダー情報

No	Name	URL
Symantec Corporation
1	SYM10-002	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00

Change Log

No	Changed Details	Date of change
0	[2012年12月20日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2010-0106

Summary	The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via "specific events" that prevent the user from having read access to unspecified resources.
Publication Date	Feb. 20, 2010, 2:30 a.m.
Registration Date	Jan. 29, 2021, 10:56 a.m.
Last Update	Oct. 31, 2018, 1:25 a.m.

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:symantec:antivirus:10.0:::::::*
cpe:2.3:a:symantec:antivirus:10.0.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.1.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2.2:::::::*
cpe:2.3:a:symantec:antivirus:10.0.3:::::::*
cpe:2.3:a:symantec:antivirus:10.0.4:::::::*
cpe:2.3:a:symantec:antivirus:10.0.5:::::::*
cpe:2.3:a:symantec:antivirus:10.0.6:::::::*
cpe:2.3:a:symantec:antivirus:10.0.7:::::::*
cpe:2.3:a:symantec:antivirus:10.0.8:::::::*
cpe:2.3:a:symantec:antivirus:10.0.9:::::::*
cpe:2.3:a:symantec:antivirus:10.1:::::::*
cpe:2.3:a:symantec:antivirus:10.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1.0.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.4::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.4.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.5::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.5.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.6::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.6.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.7::corporate:::::
cpe:2.3:a:symantec:antivirus:10.2::corporate:::::
cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:::::*
cpe:2.3:a:symantec:client_security:3.0:::::::*
cpe:2.3:a:symantec:client_security:3.0:mr1::::::
cpe:2.3:a:symantec:client_security:3.0:mr2::::::
cpe:2.3:a:symantec:client_security:3.0.0.359:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1000:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1007:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1008:::::::*
cpe:2.3:a:symantec:client_security:3.0.2:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2000:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2001:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2010:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2011:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2020:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2021:::::::*
cpe:2.3:a:symantec:client_security:3.1:::::::*
cpe:2.3:a:symantec:client_security:3.1:mr4::::::
cpe:2.3:a:symantec:client_security:3.1:mr5::::::
cpe:2.3:a:symantec:client_security:3.1:mr7::::::
cpe:2.3:a:symantec:client_security:3.1.0.396:::::::*
cpe:2.3:a:symantec:client_security:3.1.0.401:::::::*
cpe:2.3:a:symantec:client_security:3.1.394:::::::*
cpe:2.3:a:symantec:client_security:3.1.400:::::::*
cpe:2.3:a:symantec:client_security:3.1.401:::::::*
cpe:2.3:a:symantec:endpoint_protection:11.0:::::::*

Related information, measures and tools

No	URL	refsource	タグ
1	http://osvdb.org/62414	OSVDB
2	http://secunia.com/advisories/38653	SECUNIA	Vendor Advisory
3	http://www.securityfocus.com/bid/38219	BID
4	http://www.securitytracker.com/id?1023621	SECTRACK
5	http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00	CONFIRM
6	http://www.vupen.com/english/advisories/2010/0410	VUPEN	Vendor Advisory
7	https://exchange.xforce.ibmcloud.com/vulnerabilities/56354	XF

Common Vulnerabilities List

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:symantec:antivirus:10.0:::::::*
cpe:2.3:a:symantec:antivirus:10.0.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.1.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2.1:::::::*
cpe:2.3:a:symantec:antivirus:10.0.2.2:::::::*
cpe:2.3:a:symantec:antivirus:10.0.3:::::::*
cpe:2.3:a:symantec:antivirus:10.0.4:::::::*
cpe:2.3:a:symantec:antivirus:10.0.5:::::::*
cpe:2.3:a:symantec:antivirus:10.0.6:::::::*
cpe:2.3:a:symantec:antivirus:10.0.7:::::::*
cpe:2.3:a:symantec:antivirus:10.0.8:::::::*
cpe:2.3:a:symantec:antivirus:10.0.9:::::::*
cpe:2.3:a:symantec:antivirus:10.1:::::::*
cpe:2.3:a:symantec:antivirus:10.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.1.0.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.4::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.4.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.5::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.5.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.6::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.6.1::corporate:::::
cpe:2.3:a:symantec:antivirus:10.1.7::corporate:::::
cpe:2.3:a:symantec:antivirus:10.2::corporate:::::
cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:::::*
cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:::::*
cpe:2.3:a:symantec:client_security:3.0:::::::*
cpe:2.3:a:symantec:client_security:3.0:mr1::::::
cpe:2.3:a:symantec:client_security:3.0:mr2::::::
cpe:2.3:a:symantec:client_security:3.0.0.359:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1000:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1007:::::::*
cpe:2.3:a:symantec:client_security:3.0.1.1008:::::::*
cpe:2.3:a:symantec:client_security:3.0.2:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2000:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2001:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2010:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2011:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2020:::::::*
cpe:2.3:a:symantec:client_security:3.0.2.2021:::::::*
cpe:2.3:a:symantec:client_security:3.1:::::::*
cpe:2.3:a:symantec:client_security:3.1:mr4::::::
cpe:2.3:a:symantec:client_security:3.1:mr5::::::
cpe:2.3:a:symantec:client_security:3.1:mr7::::::
cpe:2.3:a:symantec:client_security:3.1.0.396:::::::*
cpe:2.3:a:symantec:client_security:3.1.0.401:::::::*
cpe:2.3:a:symantec:client_security:3.1.394:::::::*
cpe:2.3:a:symantec:client_security:3.1.400:::::::*
cpe:2.3:a:symantec:client_security:3.1.401:::::::*
cpe:2.3:a:symantec:endpoint_protection:11.0:::::::*