CVE-2016-6592

7.8HIGH

Key Information

Vendor
Symantec
Status
Norton Download Manager
Vendor
CVE Published:
14 January 2020

Summary

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.

Affected Version(s)

Norton Download Manager = 2016

Refferences

http://www.securityfocus.com/bid/94695
x_refsource_MISC
http://www.securityfocus.com/bid/95444
x_refsource_MISC
http://www.securitytracker.com/id/1037622
x_refsource_MISC
http://www.securitytracker.com/id/1037623
x_refsource_MISC
http://www.securitytracker.com/id/1037624
x_refsource_MISC
https://support.symantec.com/us/en/article.SYMSA1394.html
x_refsource_CONFIRM

EPSS Score

1% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.