Symantec has reviewed the issue that was reported with smc.exe crashing from
the command line. We have confirmed that an improperly formatted command line
can cause the user mode process to crash. However, the privileged service
process is unaffected. The client machine maintained full
For what is is worth...
I'm running MR4 version (11.0.4000.2295) and executing the command under a
non-privileged account does throw a dialog box with the error message. It also
puts an event in the application event log to the effect of Faulting
application smc.exe, version 11.0.4000.2261,
into it to come up with an exploit with it.
Thank you.
Regards, Sandeep
.--
From: Jon Kloske j...@uq.edu.au
Sent: Friday, February 13, 2009 9:11 AM
To: Sandeep Cheema 51l...@live.in
Cc: bugtraq@securityfocus.com
Subject: RE: SEP(Symantec) Bug
Hi Sandeep
To: bugtraq@securityfocus.com
Subject: SEP(Symantec) Bug
Hi,
There is a bug with the Symantec Endpoint Protection( Tested on all
versions till 11.0.4000)
When you execute the following command smc.exe -p ~ the smcgui.exe
crashes. You don't need admin privilege for this.
Regards, Sandeep
Hi,
There is a bug with the Symantec Endpoint Protection( Tested on all
versions till 11.0.4000)
When you execute the following command smc.exe -p ~ the smcgui.exe
crashes. You don't need admin privilege for this.
Regards, Sandeep
51l3n7[at]live.in
Confirmed on XP and Vista. Error message Symantec CMC Smc has stopped
working or encountered a problem and needs to close
Works with smc.exe -p (anything) as long as you don't pass a command
after the password. -p is the password switch.
