vulnerability

Symantec Endpoint Protection: CVE-2014-3434: SEP Local Client ADC Buffer Overflow

Severity
6
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jun 28, 2016
Added
Apr 27, 2018
Modified
Feb 18, 2025

Description

The sysplant driver, loaded as part of the Application and Device Control (ADC) component on a SEP client, does not do sufficient validation of external input which could result in a local client BSOD denial of service or, if successfully exploited, potentially local elevation of privilege on the client system.

Solution

endpoint_protection-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.