New MCP server — Bring vulnerability intelligence into your AI
Back to feed

CVE-2016-5311

NVDCIRCLENISA

EUVD-2016-6262 · Published Jan 9, 2020

A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint Protection Small Business Edition Cloud, and Endpoint Protection Cloud Client due to a DLL-preloading without path restrictions, which could let a local malicious user obtain system privileges.

Technologies

Symantec Norton FamilySymantec Norton SecuritySymantec Endpoint ProtectionSymantec Norton Internet SecuritySymantec Norton 360Symantec Endpoint Protection CloudSymantec Norton AntivirusSymantec Norton Security With BackupSymantec Norton Antivirus With Backup

Weaknesses

CWE-427

CVSS scores

  • v3.17.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • v2.06.9AV:L/AC:M/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

Execution Privilege Escalation Stealth

References

Potentially impacted assets

See if this affects your attack surface

Take 15 minutes to discover our platform with our experts

PatrowlIntel platform screenshot