CVE-2016-5311

Summary

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Affected Software

VendorProductVersion RangeStatus
SymantecNorton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360before 22.7affected
SymantecEndpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Clientbefore 22.8.0.50affected

Weaknesses

  • untrusted search path

ADP Enrichment

CVE Program Container

Additional References

References