PT-2017-13008 · Norton · Norton Remove & Reinstall

Published 2017-09-27 · Updated 2017-10-06 · CVE-2017-13676

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Norton Remove & Reinstall versions prior to 4.4.0.58

Description The issue occurs due to a DLL preloading vulnerability, where an application can be tricked into using a malicious DLL instead of the intended one. This happens when the application follows a specific search path to locate the DLL, allowing an attacker to provide a malicious DLL for execution. The vulnerability can be exploited through a simple file write or overwrite, resulting in the foreign DLL running under the context of the application.

Recommendations For versions prior to 4.4.0.58, update to version 4.4.0.58 to address the vulnerability.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2017-13676

Affected Products

Norton Remove & Reinstall

References · 4

• https://osv.dev/vulnerability/CVE-2017-13676 · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170926_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-13676 · Security Note
• http://securityfocus.com/bid/100939 · Note