CVE-2018-12245

published 2018-11-29

CVE-2018-12245: Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an…

high 7.8 CVSS 3.0

AV L AC L PR N UI R S U C H I H A H

Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only manifests at install time; no remediation is required for software that has already been installed. This issue only impacted the Trialware media for Symantec Endpoint Protection, which has since been updated.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
symantec	endpoint_protection	11.0 – 14.2.0.1	—
symantec_corporation	symantec_endpoint_protection	—	—

CWE-426