PT-2018-16826 · Symantec · Norton Utilities

Publicado 2018-08-22 · Atualizado 2020-08-24 · CVE-2018-5235

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norton Utilities versions prior to 16.0.3.44

Description The issue is related to a DLL Preloading vulnerability. This type of vulnerability occurs when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. The application follows a specific search path to locate the DLL, which can be exploited by a simple file write or potentially an over-write, resulting in a foreign DLL running under the context of the application.

Recommendations For versions prior to 16.0.3.44, update to version 16.0.3.44 or later to resolve the issue.

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2018-5235

Produtos afetados

Norton Utilities

Referências · 4

• https://support.symantec.com/en_US/article.SYMSA1459.html · Aviso do Fabricante
• http://securityfocus.com/bid/105099 · Nota
• https://osv.dev/vulnerability/CVE-2018-5235 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-5235 · Nota de Segurança