← Vulnerability feed

Vulnerability record · CVE-2010-0110 · published 31 January 2011

CVE-2010-0110: Symantec antivirus memory buffer overflow vulnerability

Symantec · Antivirus

Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.

7.9 CVSS 2.0 High EPSS 5.1% · top 7.9% CWE-119 · Memory buffer overflow
7.9CVSS 2.0 base score
5.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
22References
16 Jun 2026Last modified by NVD

Description

Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service.

AV:A/AC:M/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/43099 Vendor Advisory
http://secunia.com/advisories/43106 Vendor Advisory
http://securitytracker.com/id?1024996
http://www.securityfocus.com/bid/45936
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2
http://www.vupen.com/english/advisories/2011/0234 Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-028
http://www.zerodayinitiative.com/advisories/ZDI-11-030
http://www.zerodayinitiative.com/advisories/ZDI-11-031
http://www.zerodayinitiative.com/advisories/ZDI-11-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/64940
http://secunia.com/advisories/43099 Vendor Advisory
http://secunia.com/advisories/43106 Vendor Advisory
http://securitytracker.com/id?1024996
http://www.securityfocus.com/bid/45936
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2
http://www.vupen.com/english/advisories/2011/0234 Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-11-028
http://www.zerodayinitiative.com/advisories/ZDI-11-030
http://www.zerodayinitiative.com/advisories/ZDI-11-031
http://www.zerodayinitiative.com/advisories/ZDI-11-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/64940

Track CVE-2010-0110 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2010-0108Symantec antivirus memory buffer overflow vulnerabilityBuffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9…EPSS 19%10.0CVE-2009-1429Symantec AMS2 Intel LANDesk CBA Remote Command ExecutionThe Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2) passes crafted packet contents directly to the CreateProcessA …EPSS 88%analysed9.3CVE-2012-4953Symantec antivirus memory buffer overflow vulnerabilityThe decomposer engine in Symantec Endpoint Protection (SEP) 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corpor…EPSS 6.0%9.3CVE-2011-0688Symantec antivirus improper authentication vulnerabilityIntel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Cente…EPSS 4.0%9.3CVE-2010-0111Symantec antivirus improper input validation vulnerabilityHDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in S…EPSS 35%9.3CVE-2009-1430Symantec Alert Management System IAO.EXE stack buffer overflowIAO.EXE in the Symantec Alert Originator Service (Alert Management System 2, shipped with System Center, AntiVirus, Client Security and Endpoint Prot…EPSS 55%analysed9.3CVE-2009-1431Symantec antivirus vulnerabilityXFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Syma…EPSS 8.0%9.3CVE-2008-5543Symantec antivirus improper input validation vulnerabilitySymantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by pla…EPSS 3.0%

Source: NIST National Vulnerability Database (record CVE-2010-0110), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.