DLL Preloading Vulnerability in Norton Power Eraser and SymDiag by Symantec
CVE-2018-5238

7.8HIGH

Key Information:

Vendor
Symantec Corporation
Status
Norton Power Eraser
Symdiag
Vendor
CVE Published:
22 August 2018

Summary

Norton Power Eraser and SymDiag prior to specified versions are prone to a DLL Preloading vulnerability, where an attacker can exploit the application’s search path for loading DLLs. This can lead to the execution of malicious DLLs instead of the intended ones, potentially allowing unauthorized actions and access under the application's context. Ensuring timely updates and patches can mitigate these security risks.

Affected Version(s)

Norton Power Eraser Prior to 5.3.0.24

SymDiag Prior to 2.1.242

References

https://support.symantec.com/en_US/article.SYMSA1459.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/105100
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.