Back
CVE-2014-3434
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business…
Medium6.9EPSS 1.6%
- Published
- Updated
- Reserved
- Assigned by
- symantec
Description
Buffer overflow in the sysplant driver in Symantec Endpoint Protection (SEP) Client 11.x and 12.x before 12.1 RU4 MP1b, and Small Business Edition before SEP 12.1, allows local users to execute arbitrary code via a long argument to a 0x00222084 IOCTL call.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | Medium6.9 | AV:L/AC:M/Au:N/C:C/I:C/A:C |
- EPSS (exploitation in 30 days)
- 1.6% · top 24% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.9.
Weakness
Affected products
n/a
- affected n/a
References (9)
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140804_00 (opens in a new tab)x_refsource_CONFIRMx_transferred
- 109663 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
- 68946 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
- symantec-endpoint-priv-escalation(95062) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
- VU#252068 (opens in a new tab)third-party-advisoryx_refsource_CERT-VNx_transferred
- 58996 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 59697 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
- 34272 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
- http://packetstormsecurity.com/files/127772/Symantec-Endpoint-Protection-11.x-12.x-Kernel-Pool-Overflow.html (opens in a new tab)x_refsource_MISCx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2014-3434)Record last updated .