{"api_version":"1","generated_at":"2026-07-23T23:57:27+00:00","cve":"CVE-2016-6592","urls":{"html":"https://cve.report/CVE-2016-6592","api":"https://cve.report/api/cve/CVE-2016-6592.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-6592","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-6592"},"summary":{"title":"CVE-2016-6592","description":"A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.","state":"PUBLIC","assigner":"secure@symantec.com","published_at":"2020-01-14 21:15:00","updated_at":"2020-01-21 19:34:00"},"problem_types":["CWE-427"],"metrics":[],"references":[{"url":"https://support.symantec.com/us/en/article.SYMSA1394.html","name":"https://support.symantec.com/us/en/article.SYMSA1394.html","refsource":"CONFIRM","tags":["Vendor Advisory"],"title":"Norton Download Manager DLL Loading","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/95444","name":"http://www.securityfocus.com/bid/95444","refsource":"MISC","tags":["Third Party Advisory","VDB Entry"],"title":"Symantec Norton Download Manager CVE-2016-6592 DLL Loading Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1037622","name":"http://www.securitytracker.com/id/1037622","refsource":"MISC","tags":["Third Party Advisory","VDB Entry"],"title":"Symantec Endpoint Protection Cloud DLL Loading Error in Norton Download Manager Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/94695","name":"http://www.securityfocus.com/bid/94695","refsource":"MISC","tags":["Third Party Advisory","VDB Entry"],"title":"RETIRED: Symantec Norton Download Manager  DLL Loading Remote Code Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id/1037623","name":"http://www.securitytracker.com/id/1037623","refsource":"MISC","tags":["Third Party Advisory","VDB Entry"],"title":"Norton Anti-Virus DLL Loading Error in Norton Download Manager Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id/1037624","name":"http://www.securitytracker.com/id/1037624","refsource":"MISC","tags":["Third Party Advisory","VDB Entry"],"title":"Norton Internet Security DLL Loading Error in Norton Download Manager Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6592","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6592","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"6592","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"norton_download_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6592","vulnerable":"1","versionEndIncluding":"1","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"symantec","cpe5":"norton_download_manager","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"CVE_data_meta":{"ASSIGNER":"secure@symantec.com","ID":"CVE-2016-6592","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Norton Download Manager","version":{"version_data":[{"version_value":"2016"}]}}]},"vendor_name":"Symantec"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Other"}]}]},"references":{"reference_data":[{"url":"http://www.securityfocus.com/bid/94695","refsource":"MISC","name":"http://www.securityfocus.com/bid/94695"},{"url":"http://www.securityfocus.com/bid/95444","refsource":"MISC","name":"http://www.securityfocus.com/bid/95444"},{"url":"http://www.securitytracker.com/id/1037622","refsource":"MISC","name":"http://www.securitytracker.com/id/1037622"},{"url":"http://www.securitytracker.com/id/1037623","refsource":"MISC","name":"http://www.securitytracker.com/id/1037623"},{"url":"http://www.securitytracker.com/id/1037624","refsource":"MISC","name":"http://www.securitytracker.com/id/1037624"},{"refsource":"CONFIRM","name":"https://support.symantec.com/us/en/article.SYMSA1394.html","url":"https://support.symantec.com/us/en/article.SYMSA1394.html"}]}},"nvd":{"publishedDate":"2020-01-14 21:15:00","lastModifiedDate":"2020-01-21 19:34:00","problem_types":["CWE-427"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9},"baseMetricV2":{"cvssV2":{"version":"2.0","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","accessVector":"LOCAL","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL","baseScore":4.6},"severity":"MEDIUM","exploitabilityScore":3.9,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:symantec:norton_download_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"5.6","cpe_name":[]}]}]}},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"6592","Ordinal":"92894","Title":"CVE-2016-6592","CVE":"CVE-2016-6592","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"6592","Ordinal":"1","NoteData":"A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.","Type":"Description","Title":null},{"CveYear":"2016","CveId":"6592","Ordinal":"2","NoteData":"2020-01-14","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"6592","Ordinal":"3","NoteData":"2020-01-14","Type":"Other","Title":"Modified"}]}}}