DLL Preloading Vulnerability in Norton Power Eraser and SymDiag by Symantec
CVE-2018-5238

7.8HIGH

Key Information:

Vendor

Symantec Corporation

Status
Norton Power Eraser
Symdiag
Vendor
CVE Published:
22 August 2018

What is CVE-2018-5238?

Norton Power Eraser and SymDiag prior to specified versions are prone to a DLL Preloading vulnerability, where an attacker can exploit the application’s search path for loading DLLs. This can lead to the execution of malicious DLLs instead of the intended ones, potentially allowing unauthorized actions and access under the application's context. Ensuring timely updates and patches can mitigate these security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Norton Power Eraser Prior to 5.3.0.24

SymDiag Prior to 2.1.242

References

https://support.symantec.com/en_US/article.SYMSA1459.html
x_refsource_CONFIRM
http://www.securityfocus.com/bid/105100
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.