CVE-2018-5235
Severity
6.0MEDIUM
EPSS
0.2%
top 63.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedAug 22
Latest updateMay 13
Description
Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the cont…
CVSS vector
CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:HExploitability: 0.1 | Impact: 5.9