PT-2017-13008 · Norton · Norton Remove & Reinstall

Publicado 2017-09-27 · Atualizado 2017-10-06 · CVE-2017-13676

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norton Remove & Reinstall versions prior to 4.4.0.58

Description The issue occurs due to a DLL preloading vulnerability, where an application can be tricked into using a malicious DLL instead of the intended one. This happens when the application follows a specific search path to locate the DLL, allowing an attacker to provide a malicious DLL for execution. The vulnerability can be exploited through a simple file write or overwrite, resulting in the foreign DLL running under the context of the application.

Recommendations For versions prior to 4.4.0.58, update to version 4.4.0.58 to address the vulnerability.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2017-13676

Produtos afetados

Norton Remove & Reinstall

Referências · 4

• https://osv.dev/vulnerability/CVE-2017-13676 · Aviso do Fabricante
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13676 · Nota de Segurança
• http://securityfocus.com/bid/100939 · Nota