CVE-2016-6592

High

Description

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.

SeverityHigh
CVSS7.8
Exploit probability—
ProductSymantec Norton Download Manager
PublishedJan 14, 2020
First seenJan 14, 2020

How to fix

Update
  • symantec norton_download_manager5.6 or later

Affected products

ProductAffected versionsFixed in
symantec norton_download_managerv < 5.65.6

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.