CVE-2018-18367

Опубликовано: 25 апр. 2019

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Ссылки

http://www.securityfocus.com/bid/107996
Third Party Advisory
VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.html
Vendor Advisory
http://www.securityfocus.com/bid/107996
Third Party Advisory
VDB Entry
https://support.symantec.com/en_US/article.SYMSA1479.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:rtm:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1-mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2-mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru3:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1a:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1b:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4a:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru5:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1a:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp2:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp3:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp4:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp5:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp6:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp7:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp8:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp9:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14:*:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14:mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14:mp2:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:*:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp1:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp2:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.1:*:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.2:*:*:*:*:*:*:*

cpe:2.3:a:symantec:endpoint_protection_manager:14.2:mp1:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00397

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-5v9p-r9hp-37jv