CVE-2016-5311

published 2020-01-09

CVE-2016-5311: A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection	< 22.8.0.50	22.8.0.50
symantec	endpoint_protection_cloud	< 22.8.0.50	22.8.0.50
symantec	norton_360	< 22.7	22.7
symantec	norton_antivirus	< 22.7	22.7
symantec	norton_antivirus_with_backup	< 22.7	22.7
symantec	norton_family	< 22.7	22.7
symantec	norton_internet_security	< 22.7	22.7
symantec	norton_security	< 22.7	22.7
symantec	norton_security_with_backup	< 22.7	22.7

CWE-427