Symantec Norton Mobile Security For Android vulnerabilities

CVE-2016-6585 [MEDIUM] CWE-20 CVE-2016-6585: A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.1 A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript.

CVE-2016-6587 [MEDIUM] CWE-200 CVE-2016-6587: An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec An Information Disclosure vulnerability exists in the mid.dat file stored on the SD card in Symantec Norton Mobile Security for Android before 3.16, which could let a local malicious user obtain sensitive information.

CVE-2016-6586 [LOW] CWE-20 CVE-2016-6586: A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, w A security bypass vulnerability exists in Symantec Norton Mobile Security for Android before 3.16, which could let a malicious user conduct a man-in-the-middle via specially crafted JavaScript to add arbitrary URLs to the URL whitelist.