Vulnerability · Published Jan 25, 2024 · Assigned by XI
CVE-2024-23617Symantec Data Loss Prevention Buffer Overflow
Critical 9.6
In plain English
A critical-severity memory corruption in Data Loss Prevention from Symantec. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.7% (higher than 77% of all known vulnerabilities).
Severity (CVSS 3.1)9.6Critical
Exploit odds (30 days)1.7%top 23.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Data Loss Prevention | 12.0 – through 14.0.2 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H