The version of Symantec Protection for SharePoint Servers installed on the remote host is 6.0.3 to 6.0.5 prior to HF1.5 or 6.0.6 prior to HF1.6. It is, therefore, affected by multiple vulnerabilities :

  - An array indexing error exists in the Unpack: : ShortLZ() function within file unpack15.cpp due to improper validation of input when decompressing RAR files. An unauthenticated, remote attacker can exploit this, via a specially crafted file, to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code. (CVE-2016-2207)

  - 不整列のストリームキャッシュの処理時のユーザー指定入力の検証が不適切であったため、PowerPoint のファイルを処理する際に、スタックベースのバッファオーバーフロー状態が存在します。An unauthenticated, remote attacker can exploit this, via a specially crafted PPT file, to cause a denial of service condition or the execution of arbitrary code. (CVE-2016-2209)

  - A stack-based buffer overflow condition exists in the CSymLHA: : get_header() function within file Dec2LHA.dll due to improper validation of user-supplied input when decompressing LZH and LHA archive files. 認証されていないリモートの攻撃者がこれを悪用し、特別に細工されたアーカイブファイルを通じて、サービス拒否状態または任意のコードの実行を引き起こす可能性があります。
    (CVE-2016-2210)

  - ユーザー指定の入力の検証が適切でないため、libmspack ライブラリに詳細不明な複数の欠陥が存在します。An unauthenticated, remote attacker can exploit these, via a specially crafted CAB file, to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code. (CVE-2016-2211)

  - A heap buffer overflow condition exists in the CMIMEParser: : UpdateHeader() function due to improper validation of user-supplied input when parsing MIME messages. An unauthenticated, remote attacker can exploit this, via a specially crafted MIME message, to cause a denial of service condition or the execution of arbitrary code. (CVE-2016-3644)

  - An integer overflow condition exists in the Attachment: : setDataFromAttachment() function within file Dec2TNEF.dll due to improper validation of user-supplied input when decoding TNEF files. 認証されていないリモートの攻撃者は、特別に細工されたTNEFファイルを通じてこれを悪用し、サービス拒否状態を引き起こすか、任意のコードを実行する可能性があります。
    (CVE-2016-3645)

  - An array indexing error exists in the ALPkOldFormatDecompressor: : UnShrink() function within the scan engine decomposer due to improper validation of input when decoding ZIP files. An unauthenticated, remote attacker can exploit this, via a specially crafted ZIP file, to corrupt memory, resulting in a denial of service condition or the execution of arbitrary code. (CVE-2016-3646)

検出

Symantec Protection for SharePoint Servers 6.0.3 to 6.0.5 < HF1.5 / 6.0.6 < HF1.6 Multiple Vulnerabilities (SYM16-010)

high Nessus プラグイン ID 93408

変更ログが見つかりません