CVE-2018-5238
Description
Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.
How to fix
- symantec norton_power_eraser5.3.0.24 or later
- symantec symdiag2.1.242 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec norton_power_eraser | v < 5.3.0.24 | 5.3.0.24 |
| symantec symdiag | v < 2.1.242 | 2.1.242 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.