Read the docs
TI-2018-08783 Aliases CVE-2018-12244GHSA-h2ph-whqx-fccc

CSV injection in Symantec Endpoint Protection

Priority LOW 30CWE-1236Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA.

Summary

SEP (Mac client) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a CSV/DDE injection (also known as formula injection) vulnerability, which is a type of issue whereby an application or website allows untrusted input into CSV files.

Why it matters now

EPSS 0.01118 66th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SymantecSymantec Endpoint Protection (Mac Client)Prior to and including 12.1 RU6 MP9; Prior to 14.2 RU1—No fix listedCNA
  • Symantec Endpoint Protection (Mac Client) VendorSymantec Affected Prior to and including 12.1 RU6 MP9; Prior to 14.2 RU1 Fixed in — No fix listed CNA

CPE configurations NVD · 48

CPEVersionsRoleVendor
cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:macos:*:*11.0VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:mr1:*:*:*:macos:*:*11.0 mr1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:mr2:*:*:*:macos:*:*11.0 mr2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:mr3:*:*:*:macos:*:*11.0 mr3VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:mr4:*:*:*:macos:*:*11.0 mr4VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:mr4-mp2:*:*:*:macos:*:*11.0 mr4-mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:macos:*:*11.0 ru5VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:macos:*:*11.0 ru6VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp1:*:*:*:macos:*:*11.0 ru6-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp2:*:*:*:macos:*:*11.0 ru6-mp2VulnerableSymantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:macos:*:* Versions 11.0 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:mr1:*:*:*:macos:*:* Versions 11.0 mr1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:mr2:*:*:*:macos:*:* Versions 11.0 mr2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:mr3:*:*:*:macos:*:* Versions 11.0 mr3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:mr4:*:*:*:macos:*:* Versions 11.0 mr4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:mr4-mp2:*:*:*:macos:*:* Versions 11.0 mr4-mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:macos:*:* Versions 11.0 ru5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:macos:*:* Versions 11.0 ru6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp1:*:*:*:macos:*:* Versions 11.0 ru6-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp2:*:*:*:macos:*:* Versions 11.0 ru6-mp2 Vulnerable ·Symantec
Show 38 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp3:*:*:*:macos:*:*11.0 ru6-mp3VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:macos:*:*11.0 ru6aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru7:*:*:*:macos:*:*11.0 ru7VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp1:*:*:*:macos:*:*11.0 ru7-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp2:*:*:*:macos:*:*11.0 ru7-mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4:*:*:*:macos:*:*11.0 ru7-mp4VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4a:*:*:*:macos:*:*11.0 ru7-mp4aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:11.0:ry7-mp3:*:*:*:macos:*:*11.0 ry7-mp3VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:macos:*:*12.1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru1:*:*:*:macos:*:*12.1 ru1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru1-mp1:*:*:*:macos:*:*12.1 ru1-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru2:*:*:*:macos:*:*12.1 ru2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru2-mp1:*:*:*:macos:*:*12.1 ru2-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru3:*:*:*:macos:*:*12.1 ru3VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru4:*:*:*:macos:*:*12.1 ru4VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1:*:*:*:macos:*:*12.1 ru4-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1a:*:*:*:macos:*:*12.1 ru4-mp1aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1b:*:*:*:macos:*:*12.1 ru4-mp1bVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru4a:*:*:*:macos:*:*12.1 ru4aVulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru5:*:*:*:macos:*:*12.1 ru5VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6:*:*:*:macos:*:*12.1 ru6VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp1:*:*:*:mac_os_x:*:*12.1 ru6-mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp10:*:*:*:macos:*:*12.1 ru6-mp10VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp2:*:*:*:macos:*:*12.1 ru6-mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp3:*:*:*:mac_os_x:*:*12.1 ru6-mp3VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp4:*:*:*:macos:*:*12.1 ru6-mp4VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp5:*:*:*:mac_os_x:*:*12.1 ru6-mp5VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp6:*:*:*:macos:*:*12.1 ru6-mp6VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp7:*:*:*:macos:*:*12.1 ru6-mp7VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp8:*:*:*:macos:*:*12.1 ru6-mp8VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14:*:*:*:*:macos:*:*14VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14:mp1:*:*:*:macos:*:*14 mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.0.0:mp2:*:*:*:macos:*:*14.0.0 mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.0.1:*:*:*:*:macos:*:*14.0.1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp1:*:*:*:macos:*:*14.0.1 mp1VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp2:*:*:*:macos:*:*14.0.1 mp2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.2:*:*:*:*:macos:*:*14.2VulnerableSymantec
cpe:2.3:a:symantec:endpoint_protection:14.2:mp1:*:*:*:macos:*:*14.2 mp1VulnerableSymantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6-mp3:*:*:*:macos:*:* Versions 11.0 ru6-mp3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru6a:*:*:*:macos:*:* Versions 11.0 ru6a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru7:*:*:*:macos:*:* Versions 11.0 ru7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp1:*:*:*:macos:*:* Versions 11.0 ru7-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp2:*:*:*:macos:*:* Versions 11.0 ru7-mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4:*:*:*:macos:*:* Versions 11.0 ru7-mp4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ru7-mp4a:*:*:*:macos:*:* Versions 11.0 ru7-mp4a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:11.0:ry7-mp3:*:*:*:macos:*:* Versions 11.0 ry7-mp3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:*:*:*:*:macos:*:* Versions 12.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru1:*:*:*:macos:*:* Versions 12.1 ru1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru1-mp1:*:*:*:macos:*:* Versions 12.1 ru1-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru2:*:*:*:macos:*:* Versions 12.1 ru2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru2-mp1:*:*:*:macos:*:* Versions 12.1 ru2-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru3:*:*:*:macos:*:* Versions 12.1 ru3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru4:*:*:*:macos:*:* Versions 12.1 ru4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1:*:*:*:macos:*:* Versions 12.1 ru4-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1a:*:*:*:macos:*:* Versions 12.1 ru4-mp1a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru4-mp1b:*:*:*:macos:*:* Versions 12.1 ru4-mp1b Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru4a:*:*:*:macos:*:* Versions 12.1 ru4a Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru5:*:*:*:macos:*:* Versions 12.1 ru5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6:*:*:*:macos:*:* Versions 12.1 ru6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp1:*:*:*:mac_os_x:*:* Versions 12.1 ru6-mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp10:*:*:*:macos:*:* Versions 12.1 ru6-mp10 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp2:*:*:*:macos:*:* Versions 12.1 ru6-mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp3:*:*:*:mac_os_x:*:* Versions 12.1 ru6-mp3 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp4:*:*:*:macos:*:* Versions 12.1 ru6-mp4 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp5:*:*:*:mac_os_x:*:* Versions 12.1 ru6-mp5 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp6:*:*:*:macos:*:* Versions 12.1 ru6-mp6 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp7:*:*:*:macos:*:* Versions 12.1 ru6-mp7 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:12.1:ru6-mp8:*:*:*:macos:*:* Versions 12.1 ru6-mp8 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14:*:*:*:*:macos:*:* Versions 14 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14:mp1:*:*:*:macos:*:* Versions 14 mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.0.0:mp2:*:*:*:macos:*:* Versions 14.0.0 mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.0.1:*:*:*:*:macos:*:* Versions 14.0.1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp1:*:*:*:macos:*:* Versions 14.0.1 mp1 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.0.1:mp2:*:*:*:macos:*:* Versions 14.0.1 mp2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.2:*:*:*:*:macos:*:* Versions 14.2 Vulnerable ·Symantec
  • cpe:2.3:a:symantec:endpoint_protection:14.2:mp1:*:*:*:macos:*:* Versions 14.2 mp1 Vulnerable ·Symantec

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-12244
  2. 2026-10-03 Alias added: GHSA-h2ph-whqx-fccc

References

Advisory 1

  • TI-2009-01353 The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2)… CVSS 2.0HIGH 10.0
  • TI-2009-01354 Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in… CVSS 2.0HIGH 9.3
  • TI-2016-02020 The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec… CVSS 3.0HIGH 7.8
  • TI-2012-01284 The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus… CVSS 2.0MEDIUM 4.3
  • TI-2012-01283 The Gzip file parser in AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Command Antivirus… CVSS 2.0MEDIUM 4.3
  • TI-2012-01281 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir… CVSS 2.0MEDIUM 4.3
See all 70 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences