Re: ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability

[James Lay <jlay () slave-tothe-box net>]

On 2012-08-22 09:40, ZDI Disclosures wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet 
> Remote
> Code Execution Vulnerability
> http://www.zerodayinitiative.com/advisories/ZDI-12-145
> August 22, 2012
<snip>
> - -- Vendor Response:
> Symantec has issued an update to correct this vulnerability. More 
> details
> can be found at:
>
> http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=se
> curity_advisory&pvid=security_advisory&year=2012&suid=20120522_01
>
> - -- Disclosure Timeline:
> 2011-10-28 - Vulnerability reported to vendor
> 2012-08-22 - Coordinated public release of advisory
<more snipped>

According to the link, they published a fix in May of this year?  Did I 
miss something?  Thanks.

James

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/