CVE-2012-0290

critical

Published 2012-02-06 · Modified 2026-04-29

CVSS v3

—

CVSS v2

10.0

VIR risk

10.0

Description

Symantec pcAnywhere through 12.5.3, Altiris IT Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), Altiris Client Management Suite pcAnywhere Solution 7.0 (aka 12.5.x) and 7.1 (aka 12.6.x), and Altiris Deployment Solution Remote pcAnywhere Solution 7.1 (aka 12.5.x and 12.6.x) do not properly handle the client state after abnormal termination of a remote session, which allows remote attackers to obtain access to the client by leveraging an "open client session."

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: cve@mitre.org — http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120124_00

Application impact

Vendor	Product	Versions
symantec	pcanywhere	`{"endIncluding":"12.5.3"}`
symantec	pcanywhere	`5.0`
symantec	pcanywhere	`8.0`
symantec	pcanywhere	`9.2`
symantec	pcanywhere	`10.5`
symantec	pcanywhere	`11.5`
symantec	pcanywhere	`11.5.1`
symantec	pcanywhere	`12.1`
symantec	pcanywhere	`12.5`
symantec	pcanywhere	`12.5.265`
symantec	pcanywhere	`12.5.539`
symantec	pcanywhere	`12.6.65`
symantec	pcanywhere	`12.6.7580`
symantec	altiris_client_management_suite_pcanywhere_solution	`12.5`
symantec	altiris_client_management_suite_pcanywhere_solution	`12.6`
symantec	altiris_deployment_solution_remote_pcanywhere_solution	`12.5`
symantec	altiris_deployment_solution_remote_pcanywhere_solution	`12.6`

References

Verify integrity in audit chain (admin only). AS-IS.