high7.8
CVE-2016-5311
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton In…
Impact
A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Endpoint Protection | before 22.8.0.50 |
| Symantec | Endpoint Protection Cloud | before 22.8.0.50 |
| Symantec | Norton 360 | before 22.7 |
| Symantec | Norton Antivirus | before 22.7 |
| Symantec | Norton Antivirus With Backup | before 22.7 |
| Symantec | Norton Family | before 22.7 |
| Symantec | Norton Internet Security | before 22.7 |
| Symantec | Norton Security | before 22.7 |
| Symantec | Norton Security With Backup | before 22.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/94295
- http://www.securitytracker.com/id/1037323
- http://www.securitytracker.com/id/1037324
- http://www.securitytracker.com/id/1037325
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00
- http://www.securityfocus.com/bid/94295
- http://www.securitytracker.com/id/1037323
- http://www.securitytracker.com/id/1037324
- http://www.securitytracker.com/id/1037325
- https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00