{"id":"CVE-2013-1612","aliases":["EUVD-2013-1647","GHSA-f29q-g5f7-h3m7"],"status":"published","title":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager ...","description":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.","severity":{"version":"2.0","score":7.9,"vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04383,"percentile":0.91365,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2013-06-20T01:00:00Z","modified":"2026-06-16T23:51:46Z","exploits":[{"source":"exploitdb","id":"EDB-33056","title":"Symantec Endpoint Protection Manager 12.1.x - Overflow (SEH) (PoC)","type":"dos","platform":"windows","date":"2014-04-27","url":"https://www.exploit-db.com/exploits/33056"}],"products":[{"vendor":"symantec","product":"endpoint_protection_center"},{"vendor":"symantec","product":"endpoint_protection_manager"}],"references":[{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026suid=20130618_00","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/60542","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-1612"},{"url":"https://github.com/advisories/GHSA-f29q-g5f7-h3m7"}],"sources":{"cve":[{"id":"CVE-2013-1612","description":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2013-06-20T01:00:00Z","modified":"2024-09-16T20:58:56.957Z","updated_at":"2026-11-02T14:34:58.882751Z"}],"euvd":[{"id":"EUVD-2013-1647","description":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2013-06-20T01:00:00Z","modified":"2024-09-16T20:58:56Z","updated_at":"2026-11-03T00:55:09.104839Z"}],"ghsa":[{"id":"GHSA-f29q-g5f7-h3m7","title":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager ...","description":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2022-05-17T05:08:40Z","modified":"2023-01-28T05:03:16Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:43:56.576463Z"}],"nvd":[{"id":"CVE-2013-1612","description":"Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1.x before 12.1.3, and Symantec Endpoint Protection Center (SPC) Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors.","status":"published","published":"2013-06-20T03:17:30.64Z","modified":"2026-06-16T23:51:46.64Z","cvss":[{"version":"2.0","score":7.9,"vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:02:29.210317Z"}]}}