PT-2020-8037 · Symantec · Norton Security With Backup+7

Published 2020-01-09 · Updated 2020-01-29 · CVE-2016-5311

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Symantec Norton Antivirus (affected versions not specified) Symantec Norton AntiVirus with Backup (affected versions not specified) Symantec Norton Security (affected versions not specified) Symantec Norton Security with Backup (affected versions not specified) Symantec Norton Internet Security (affected versions not specified) Symantec Norton 360 (affected versions not specified) Symantec Endpoint Protection Small Business Edition Cloud (affected versions not specified) Symantec Endpoint Protection Cloud Client (affected versions not specified)

Description: A Privilege Escalation issue exists due to a DLL-preloading vulnerability without path restrictions. This could allow a local malicious user to obtain system privileges.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2016-5311

Affected Products

Endpoint Protection Cloud Client

Endpoint Protection Small Business Edition Cloud

Norton 360

Norton Antivirus With Backup

Norton Antivirus

Norton Internet Security

Norton Security

Norton Security With Backup

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2016-5311 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5311 · Vendor Advisory
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00 · Vendor Advisory
• http://securitytracker.com/id/1037324 · Note
• http://securitytracker.com/id/1037325 · Note
• http://securitytracker.com/id/1037323 · Note
• http://securityfocus.com/bid/94295 · Note