CORE IMPACT v12 - Exploits Update (Fri Feb 03 2012)

Symantec PCAnywhere awhost32 Remote Code Execution Exploit

Exploits/Remote [Windows]

Fri Feb 03 2012
The flaw exists within the awhost32 component which is used when handling incoming connections. This process listens on TCP port 5631. When handling an authentication request the process copies the user supplied username unsafely to a fixed-length buffer.

Exploits Vulnerabiltiy: CVE-2011-3478

< Back to Product Updates