PT-2019-9583 · Symantec · Symantec Endpoint Protection Manager+1

Published 2019-04-25 · Updated 2019-05-03 · CVE-2018-18367

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to and including 12.1 RU6 MP9 Symantec Endpoint Protection Manager versions prior to 14.2 RU1

Description The issue is related to a DLL Preloading vulnerability. This type of vulnerability occurs when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Recommendations For versions prior to and including 12.1 RU6 MP9, update to a version later than 12.1 RU6 MP9. For versions prior to 14.2 RU1, update to version 14.2 RU1 or later.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

CVE-2018-18367

Affected Products

Symantec Endpoint Protection Manager

Symantec Endpoint Protection Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-18367 · Security Note
• https://osv.dev/vulnerability/CVE-2018-18367 · Vendor Advisory
• https://support.symantec.com/en_US/article.SYMSA1479.html · Vendor Advisory
• http://securityfocus.com/bid/107996 · Note