CVE-2018-18369
High
Description
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSymantec Norton Security
PublishedApr 25, 2019
First seenApr 25, 2019
How to fix
Update
- symantec norton_security22.16.3 or later
- symantec endpoint_protection_cloud22.16.3 or later
- symantec endpoint_protection_cloud_agent3.00.31.2817 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton_security | v < 22.16.3 | 22.16.3 |
| symantec endpoint_protection | nis-22.15.2.22, sep-12.1.7484.7002 | — |
| symantec endpoint_protection_cloud | v < 22.16.3 | 22.16.3 |
| symantec endpoint_protection_cloud_agent | v < 3.00.31.2817 | 3.00.31.2817 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.