DLL Preloading Vulnerability in Norton Power Eraser and SymDiag by Symantec

CVE-2018-5238

What is CVE-2018-5238?

Norton Power Eraser and SymDiag prior to specified versions are prone to a DLL Preloading vulnerability, where an attacker can exploit the application’s search path for loading DLLs. This can lead to the execution of malicious DLLs instead of the intended ones, potentially allowing unauthorized actions and access under the application's context. Ensuring timely updates and patches can mitigate these security risks.

References