A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/94695 | Third Party Advisory VDB Entry |
http://www.securityfocus.com/bid/95444 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1037622 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1037623 | Third Party Advisory VDB Entry |
http://www.securitytracker.com/id/1037624 | Third Party Advisory VDB Entry |
https://support.symantec.com/us/en/article.SYMSA1394.html | Vendor Advisory |
Configurations
History
No history.
Information
Published : 2020-01-14 21:15
Updated : 2024-02-28 17:28
NVD link : CVE-2016-6592
Mitre link : CVE-2016-6592
CVE.ORG link : CVE-2016-6592
JSON object : View
Products Affected
symantec
- norton_download_manager
CWE
CWE-427
Uncontrolled Search Path Element