CVE-2016-6590

Summary

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.

Affected Software

VendorProductVersion RangeStatus
SymantecIT Management Suite8.0 prior to 8.0 HF4 and 7.6 prior to 7.6 HF7affected
SymantecGhost Solution Suite3.1 prior to 3.1 MP4affected
SymantecSymantec Endpoint Virtualization7.x prior to 7.6 HFaffected
SymantecEncryption Desktop0.x prior to 10.4.1affected
SymantecEncryption Desktopn/aaffected

Weaknesses

  • untrusted search path

ADP Enrichment

CVE Program Container

Additional References

References