CVE-2016-5309
Description
The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom symantec_data_center_security_server | No range specified | — |
| symantec advanced_threat_protection | No range specified | — |
| symantec csapi | v ≤ 10.0.4 | — |
| symantec email_security.cloud | No range specified | — |
| symantec endpoint_protection | v ≤ 12.1.4, v ≤ 12.1.6 | — |
| symantec endpoint_protection_cloud | No range specified | — |
| symantec endpoint_protection_for_small_business | v ≤ 12.1, No range specified | — |
| symantec mail_security_for_domino | v ≤ 8.0.9, 8.1.2, 8.1.3 | — |
| symantec mail_security_for_microsoft_exchange | v ≤ 6.5.8, 7.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.5, 7.5.1, 7.5.2, 7.5.3, 7.5.4 | — |
| symantec messaging_gateway | v ≤ 10.6.1 | — |
| symantec messaging_gateway_for_service_providers | 10.5, 10.6 | — |
| symantec protection_engine | v ≤ 7.0.5, 7.5.0, 7.5.1, 7.5.2, 7.5.3, 7.5.4, 7.5.5, 7.8.0 | — |
| symantec protection_for_sharepoint_servers | 6.0.3, 6.0.4, 6.0.5, 6.0.6, 6.0.7 | — |
| symantec web_gateway | No range specified | — |
| symantec web_security.cloud | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.