PT-2019-9583 · Symantec · Symantec Endpoint Protection Manager+1

Publicado 2019-04-25 · Atualizado 2019-05-03 · CVE-2018-18367

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to and including 12.1 RU6 MP9 Symantec Endpoint Protection Manager versions prior to 14.2 RU1

Description The issue is related to a DLL Preloading vulnerability. This type of vulnerability occurs when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Recommendations For versions prior to and including 12.1 RU6 MP9, update to a version later than 12.1 RU6 MP9. For versions prior to 14.2 RU1, update to version 14.2 RU1 or later.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2018-18367

Produtos afetados

Symantec Endpoint Protection Manager

Symantec Endpoint Protection Server

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-18367 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-18367 · Aviso do Fabricante
• http://securityfocus.com/bid/107996 · Nota
• https://support.symantec.com/en_US/article.SYMSA1479.html · Aviso do Fabricante