PT-2018-11066 · Symantec · Norton+4

Publicado 2018-11-29 · Atualizado 2019-10-03 · CVE-2018-12238

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norton versions prior to 22.15 Symantec Endpoint Protection (SEP) versions prior to 12.1.7454.7000 and 14.2 Symantec Endpoint Protection Small Business Edition (SEP SBE) versions prior to NIS-22.15.1.8 and SEP-12.1.7454.7000 Symantec Endpoint Protection Cloud (SEP Cloud) version prior to 22.15.1

Description The issue is related to an AV bypass, which is a type of exploit that works to circumvent one of the virus detection engines to avoid a specific type of virus protection. One of the antivirus engines depends on a signature pattern from a database to identify malicious files and viruses. The exploit looks to alter the file being scanned so it is not detected.

Recommendations For Norton versions prior to 22.15, update to version 22.15 or later. For Symantec Endpoint Protection (SEP) versions prior to 12.1.7454.7000 and 14.2, update to version 12.1.7454.7000 or 14.2 or later. For Symantec Endpoint Protection Small Business Edition (SEP SBE) versions prior to NIS-22.15.1.8 and SEP-12.1.7454.7000, update to version NIS-22.15.1.8 and SEP-12.1.7454.7000 or later. For Symantec Endpoint Protection Cloud (SEP Cloud) version prior to 22.15.1, update to version 22.15.1 or later.

Correção

Identificadores relacionados

CVE-2018-12238

Produtos afetados

Norton

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Symantec Endpoint Protection Cloud

Symantec Endpoint Protection Small Business Edition

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-12238 · Nota de Segurança
• http://securityfocus.com/bid/105917 · Nota
• https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-12238 · Aviso do Fabricante