CVE-2010-0108: Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Sy...

Security readout for executives and security teams

This is an old Symantec endpoint security flaw in a browser-exposed ActiveX component. If an affected client loads attacker-controlled input, the flaw could allow code execution on that Windows endpoint. Business risk is highest where legacy Symantec AntiVirus or Client Security versions remain installed. Exposure is likely limited to legacy Windows endpoints with the vulnerable Symantec products and ActiveX control still present. Modern environments are exposed only if these obsolete products or components remain installed, registered, and reachable through browser or local content paths. Treat this as a legacy exposure cleanup item with high endpoint impact. Prioritize discovery first: if no affected Symantec 10.x or Client Security 3.x systems exist, business risk is low. If they do, upgrade or remove them promptly. Mitigation focus: Upgrade affected Symantec AntiVirus releases to MR9, MR4, or later as applicable.; Upgrade affected Symantec Client Security releases to MR9 or later.; Check the Symantec advisory for product-specific remediation guidance..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.