CVE:CVE-2012-0291
CNNVD:CNNVD-201202-436
Symantec pcAnywhere是一款功能强大的远程控制软件。
Symantec pcAnywhere至12.5.3版本，Altiris IT Management Suite pcAnywhere Solution 7.0版本（也称12.5.x版本）和7.1版本（也称12.6.x版本），Altiris Client Management Suite pcAnywhere Solution 7.0版本（也称12.5.x版本）和7.1版本（也称12.6.x版本）和Altiris Deployment Solution Remote pcAnywhere Solution 7.1版本（也称12.5.x版本和12.6.x版本）中存在漏洞。远程攻击者可利用该漏洞，借助（1）客户端的畸形数据 （2）服务器的畸形数据或（3）无效回应，导致拒绝服务（应用程序崩溃或挂起）。
solution:Upgrade symantec pcanywhere to a higher version than *:sp3,10.0,10.5,11.0,11.0.1,11.5,11.5.1,12.0,12.0.1,12.0.2,12.0.3,12.1,12.5,12.5:sp1,12.5:sp2,12.5.3,12.5.265,12.5.539,and avoid the version *:sp3,10.0,10.5,11.0,11.0.1,11.5,11.5.1,12.0,12.0.1,12.0.2,12.0.3,12.1,12.5,12.5:sp1,12.5:sp2,12.5.3,12.5.265,12.5.539; Upgrade symantec altiris_client_management_suite_pcanywhere_solution to a higher version than 7.0,and avoid the version 7.0; Upgrade symantec altiris_deployment_solution_remote_pcanywhere_solution to a higher version than 7.1,and avoid the version 7.1; Upgrade symantec altiris_it_management_suite_pcanywhere_solution to a higher version than 7.0,7.1,and avoid the version 7.0,7.1