Vulnerability Details CVE-2016-6592
A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.0%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
- http://www.securityfocus.com/bid/94695
- http://www.securityfocus.com/bid/95444
- http://www.securitytracker.com/id/1037622
- http://www.securitytracker.com/id/1037623
- http://www.securitytracker.com/id/1037624
- https://support.symantec.com/us/en/article.SYMSA1394.html
- http://www.securityfocus.com/bid/94695
- http://www.securityfocus.com/bid/95444
- http://www.securitytracker.com/id/1037622
- http://www.securitytracker.com/id/1037623
- http://www.securitytracker.com/id/1037624
- https://support.symantec.com/us/en/article.SYMSA1394.html
Products affected by CVE-2016-6592
-
cpe:2.3:a:symantec:norton_download_manager:*