Privilege Escalation Vulnerability in Symantec Norton Products
CVE-2016-5311

7.8HIGH

Key Information:

Vendor
Symantec
Status
Norton Antivirus, Norton Antivirus With Backup, Norton Security, Norton Security With Backup, Norton Internet Security, Norton 360
Endpoint Protection Small Business Edition Cloud, And Endpoint Protection Cloud Client
Vendor
CVE Published:
9 January 2020

Summary

A privilege escalation vulnerability has been identified in a range of Symantec Norton products, stemming from improper DLL preloading that lacks appropriate path restrictions. This security flaw could enable a local malicious user to gain unauthorized system privileges, potentially allowing them to execute arbitrary code with elevated rights, thereby compromising the affected system's integrity and security.

Affected Version(s)

Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client before 22.8.0.50

Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360 before 22.7

References

http://www.securityfocus.com/bid/94295
x_refsource_MISC
http://www.securitytracker.com/id/1037323
x_refsource_MISC
http://www.securitytracker.com/id/1037324
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.