medium5.5Public exploit code

CVE-2016-5309

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Symantec RAR Decomposer Engine (Multiple Products) - Out-of-Bounds Read / Out-of-Bounds Write2016-09-21 · dos · multiple · Verified

Impact

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.

Affected products

Vendor	Product	Affected versions
Broadcom	Symantec Data Center Security Server	All versions
Symantec	Advanced Threat Protection	All versions
Symantec	Csapi	through 10.0.4
Symantec	Email Security.Cloud	All versions
Symantec	Endpoint Protection	through 12.1.4 through 12.1.6
Symantec	Endpoint Protection Cloud	All versions
Symantec	Endpoint Protection For Small Business	through 12.1 All versions
Symantec	Mail Security For Domino	through 8.0.9 Versions 8.1.2, 8.1.3
Symantec	Mail Security For Microsoft Exchange	through 6.5.8 Versions 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4
Symantec	Messaging Gateway	through 10.6.1
Symantec	Messaging Gateway For Service Providers	Versions 10.5, 10.6
Symantec	Protection Engine	through 7.0.5 Versions 7.5.0, 7.5.1, 7.5.2, 7.5.3, 7.5.4

Weakness classification

CWE-125

Public exploit code

Impact

Affected products

Weakness classification

References