CVE-2018-5235

Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.

• CVE ID
• CVE-2018-5235

• Assigner
• secure@symantec.com

• Vulnerability Status
• Analyzed

• Published Version
• 2018-08-22T17:29:00

• Last Modified Date
• 2020-08-24T17:37:01

• Version
• 2.0

• Vector String
• AV:L/AC:M/Au:N/C:P/I:P/A:P

• Access Vector
• LOCAL

• Access Compatibility
• MEDIUM

• Authentication
• NONE

• Confidentiality Impact
• PARTIAL

• Integrity Impact
• PARTIAL

• Availability Impact
• PARTIAL

• Base Score
• 4.4

• Severity
• MEDIUM

• Exploitability Score
• 3.4

• Impact Score
• 6.4

• Version
• 3.0

• Vector String
• CVSS:3.0/AV:P/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

• Attack Vector
• PHYSICAL

• Attack Compatibility
• HIGH

• Privileges Required
• HIGH

• User Interaction
• REQUIRED

• Scope
• UNCHANGED

• Confidentiality Impact
• HIGH

• Availability Impact
• HIGH

• Base Score
• 6

• Base Severity
• MEDIUM

• Exploitability Score
• 0.1

• Impact Score
• 5.9