Vulnerability Name: CVE-2016-5311 (CCN-119155) Assigned: 2016-11-22 Published: 2016-11-22 Updated: 2020-01-29 Summary: A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges. CVSS v3 Severity: 7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitability Metrics: Attack Vector (AV): LocalAttack Complexity (AC): LowPrivileges Required (PR): NoneUser Interaction (UI): RequiredScope: Scope (S): UnchangedImpact Metrics: Confidentiality (C): HighIntegrity (I): HighAvailibility (A): High
7.5 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H 6.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C Exploitability Metrics: Attack Vector (AV): LocalAttack Complexity (AC): HighPrivileges Required (PR): LowUser Interaction (UI): RequiredScope: Scope (S): ChangedImpact Metrics: Confidentiality (C): HighIntegrity (I): HighAvailibility (A): High
CVSS v2 Severity: 6.9 Medium (CVSS v2 Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C Exploitability Metrics: Access Vector (AV): LocalAccess Complexity (AC): MediumAuthentication (Au): NoneImpact Metrics: Confidentiality (C): CompleteIntegrity (I): CompleteAvailibility (A): Complete
6.0 Medium (CCN CVSS v2 Vector: AV:L/AC:H/Au:S/C:C/I:C/A:C Exploitability Metrics: Access Vector (AV): LocalAccess Complexity (AC): HighAthentication (Au): Single_InstanceImpact Metrics: Confidentiality (C): CompleteIntegrity (I): CompleteAvailibility (A): Complete
Vulnerability Type: CWE-427 Vulnerability Consequences: Gain Privileges References: Source: MITRECVE-2016-5311 Multiple Symantec Products CVE-2016-5311 DLL Loading Local Privilege Escalation Vulnerability http://www.securityfocus.com/bid/94295 http://www.securitytracker.com/id/1037323 http://www.securitytracker.com/id/1037324 http://www.securitytracker.com/id/1037325 symantec-cve20165311-priv-esc(119155) Symantec Norton Client DLL Pre-Loading Uncontrolled Search Path Elevation of Privilege https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20161117_00 Vulnerable Configuration: Configuration 1 :cpe:/a:symantec:endpoint_protection:*:*:*:*:*:*:*:* (Version < 22.8.0.50)OR cpe:/a:symantec:endpoint_protection_cloud:*:*:*:*:*:*:*:* (Version < 22.8.0.50) OR cpe:/a:symantec:norton_360:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_antivirus:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_antivirus_with_backup:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_family:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_internet_security:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_security:*:*:*:*:*:*:*:* (Version < 22.7) OR cpe:/a:symantec:norton_security_with_backup:*:*:*:*:*:*:*:* (Version < 22.7) Configuration CCN 1 :cpe:/a:symantec:norton_antivirus:*:*:*:*:*:*:*:* OR cpe:/a:symantec:norton_internet_security:*:*:*:*:*:*:*:* OR cpe:/a:symantec:endpoint_encryption:11.0.0:*:*:*:*:*:*:* OR cpe:/a:symantec:norton_antivirus_with_backup:*:*:*:*:*:*:*:* BACK
symantec endpoint protection *
symantec endpoint protection cloud *
symantec norton 360 *
symantec norton antivirus *
symantec norton antivirus with backup *
symantec norton family *
symantec norton internet security *
symantec norton security *
symantec norton security with backup *
symantec norton antivirus *
symantec norton internet security *
symantec endpoint encryption 11.0.0
symantec norton antivirus with backup *
Denotes that component is vulnerable