CVE-2016-3646
Description
The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection (SEP) before 12.1 RU6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1 RU6 MP5; Symantec Protection Engine (SPE) before 7.0.5 HF01, 7.5.x before 7.5.3 HF03, 7.5.4 before HF01, and 7.8.0 before HF01; Symantec Protection for SharePoint Servers (SPSS) 6.0.3 through 6.0.5 before 6.0.5 HF 1.5 and 6.0.6 before HF 1.6; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 7.0_3966002 HF1.1 and 7.5.x before 7.5_3966008 VHF1.2; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF1.1 and 8.1.x before 8.1.3 HF1.2; CSAPI before 10.0.4 HF01; Symantec Message Gateway (SMG) before 10.6.1-4; Symantec Message Gateway for Service Providers (SMG-SP) 10.5 before patch 254 and 10.6 before patch 253; Norton AntiVirus, Norton Security, Norton Internet Security, and Norton 360 before NGC 22.7; Norton Security for Mac before 13.0.2; Norton Power Eraser (NPE) before 5.1; and Norton Bootable Removal Tool (NBRT) before 2016.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation) via a crafted ZIP archive that is mishandled during decompression.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton_security | v ≤ 13.0.1, No range specified | — |
| symantec protection_engine | 7.0.0 ≤ v ≤ 7.0.5, 7.5.0 ≤ v ≤ 7.5.4, 7.8.0 | — |
| symantec advanced_threat_protection | v ≤ 2.0.3 | — |
| symantec norton_bootable_removal_tool | v ≤ 2016.0 | — |
| symantec data_center_security_server | 6.0, 6.5, 6.6 | — |
| symantec protection_for_sharepoint_servers | 6.0 ≤ v ≤ 6.0.6, 6.03 ≤ v ≤ 6.05 | — |
| symantec message_gateway_for_service_providers | 10.5, 10.6 | — |
| symantec csapi | v ≤ 10.0.4 | — |
| symantec endpoint_protection | 12.1.6 | — |
| symantec norton_power_eraser | v ≤ 5.0 | — |
| symantec mail_security_for_domino | 8.0 ≤ v ≤ 8.0.9, 8.1 ≤ v ≤ 8.1.3 | — |
| symantec mail_security_for_microsoft_exchange | 7.0 ≤ v ≤ 7.0.4, 7.5 ≤ v ≤ 7.5.4, 6.5.8 | — |
| symantec message_gateway | v ≤ 10.6.1-3 | — |
| symantec norton_360 | No range specified | — |
| symantec norton_antivirus | No range specified | — |
| symantec norton_internet_security | No range specified | — |
| symantec norton_security_with_backup | No range specified | — |
| symantec ngc | v ≤ 22.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.