Critical severity9.6NVD Advisory· Published Jan 26, 2024· Updated Jun 17, 2026

CVE-2024-23617

Description

A buffer overflow vulnerability exists in Symantec Data Loss Prevention version 14.0.2 and before. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a crafted document to achieve code execution.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Broadcom Corporation/Symantec Data Center Security Server And Agents
cpe:2.3:a:broadcom:symantec_data_center_security_server:*:*:*:*:*:*:*:*
Range: <=14.0.2
Symantec/Data Loss Preventionllm-fuzzy2 versions
<=14.0.2+ 1 more
- (no CPE)range: <=14.0.2
- (no CPE)range: 12.0

Patches

Vulnerability mechanics

References

blog.exodusintel.com/2024/01/25/symantec-data-loss-prevention-wp6sr-dll-stack-buffer-overflow-remote-code-execution/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.624
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000