Symantec Norton Remove and Reinstall DLL Loading CVE-2017-13676 Local Code Execution Vulnerability
BID:100939
CVE-2017-13676 |Info
Symantec Norton Remove and Reinstall DLL Loading CVE-2017-13676 Local Code Execution Vulnerability
| Bugtraq ID: | 100939 |
| Class: | Unknown |
| CVE: |
CVE-2017-13676 |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 26 2017 12:00AM |
| Updated: | Sep 26 2017 12:00AM |
| Credit: | Kushal Arvind Shah from Fortinet's FortiGuard Labs. |
| Vulnerable: |
Symantec Norton Remove and Reinstall 4.4.0.57 Symantec Norton Remove and Reinstall 0 |
| Not Vulnerable: |
Symantec Norton Remove and Reinstall 4.4.0.58 |
Discussion
Symantec Norton Remove and Reinstall DLL Loading CVE-2017-13676 Local Code Execution Vulnerability
Symantec Norton Remove & Reinstall is prone to a local arbitrary code-execution vulnerability because it fails to sanitize user-supplied input.
A local attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application.
Versions prior to Symantec Norton Remove & Reinstall 4.4.0.58 are vulnerable.
Symantec Norton Remove & Reinstall is prone to a local arbitrary code-execution vulnerability because it fails to sanitize user-supplied input.
A local attacker can exploit this issue to execute arbitrary code in the context of the user running the affected application.
Versions prior to Symantec Norton Remove & Reinstall 4.4.0.58 are vulnerable.
Exploit / POC
Symantec Norton Remove and Reinstall DLL Loading CVE-2017-13676 Local Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].