CVE-2018-18367

2019-04-2519:22:17

symantec

www.cve.org

AI Score

7.6

Confidence

High

EPSS

0.001

Percentile

31.3%

JSON

Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

CNA Affected

[
  {
    "product": "Symantec Endpoint Protection Manager",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to and including 12.1 RU6 MP9"
      },
      {
        "status": "affected",
        "version": "Prior to 14.2 RU1"
      }
    ]
  }
]

References

www.securityfocus.com/bid/107996

support.symantec.com/en_US/article.SYMSA1479.html