CVE-2005-1970

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature.

Published: Jun 16, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-1970
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
symantec / pcanywhere	9.0.1	9.0.1.x
symantec / pcanywhere	10.0	10.0.x
symantec / pcanywhere	8.0.1	8.0.1.x
symantec / pcanywhere	9.0	9.0.x
symantec / pcanywhere	9.2	9.2.x
symantec / pcanywhere	11.0	11.0.x
symantec / pcanywhere	10.5	10.5.x
symantec / pcanywhere	8.0.2	8.0.2.x

http://secunia.com/advisories/15673
http://securityresponse.symantec.com/avcenter/security/Content/2005.06.10.html
http://securitytracker.com/id?1014178
http://www.securityfocus.com/bid/13933

Vulnerability Database

290,020

CVE-2005-1970