Remote Code Execution Vulnerability in Symantec Norton Download Manager
CVE-2016-6592
7.8HIGH
Summary
A security flaw exists in the Norton Download Manager where a remote attacker can exploit the vulnerability by crafting a malicious DLL file. When this DLL is placed on the target system, it can be loaded instead of the legitimate DLL by the Norton Download Manager. This allows the attacker to execute arbitrary code on the target machine, potentially resulting in unauthorized access and system compromise.
Affected Version(s)
Norton Download Manager 2016
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved