PT-2017-17002 · Symantec · Symantec Vip Access Desktop

Published 2017-08-21 · Updated 2019-10-03 · CVE-2017-6329

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec VIP Access for Desktop versions prior to 2.2.4

Description The issue occurs due to a DLL Pre-Loading vulnerability, where an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. The exploitation of the issue manifests as a simple file write (or potentially an over-write) which results in a foreign executable running under the context of the application.

Recommendations For Symantec VIP Access for Desktop versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue. As a temporary workaround, consider restricting the application's ability to load external DLLs to minimize the risk of exploitation.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2017-6329

Affected Products

Symantec Vip Access Desktop

References · 4

• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20170821_00 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6329 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6329 · Vendor Advisory
• http://securityfocus.com/bid/100200 · Note