CVE-2016-5311

Katalog CVE

CVSS 7.8 · High EPSS 0,71%

Kerentanan Uncontrolled Search Path Element pada symantec endpoint protection, symantec endpoint protection cloud +7 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Rincian

Terbit di NVD

9 Januari 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,71% peluang dieksploitasi; lebih tinggi dari 52,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advi... advisory vendor
• http://www.securityfocus.com/bid/94295 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037323 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037324 advisory pihak ketiga · vdb entry
• http://www.securitytracker.com/id/1037325 advisory pihak ketiga · vdb entry