CVE-2016-6593

Summary: Symantec VIP Access Desktop before 2.2.2 is affected by a local code execution vulnerability during startup. The UI Manager loads DLLs from the current working folder, allowing a local attacker to replace required DLLs (jhi.dll/otpiha.dll) with malicious ones and execute arbitrary code i...