CVE-2002-1540: High severity Symantec Norton Antivirus vulnerability

Published Mar 31, 2003

Updated

The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.

Affected Software

3 affected components

Symantec Norton Antivirus=corporate_7.51

Symantec Norton Antivirus=corporate_7.6

Symantec Norton Antivirus=corporate_7.5

Remediation

Patch Available

http://www.iss.net/security_center/static/10475.php

Event History

Mar 31, 2003

CVE Published

05:00 AM

Sep 1, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1540?

CVE-2002-1540 is considered a high-severity vulnerability due to the potential for local privilege escalation.

How do I fix CVE-2002-1540?

To fix CVE-2002-1540, upgrade Symantec Norton AntiVirus Corporate Edition to version 7.5.1 Build 62 or 7.6.1 Build 35a or later.

Which versions of Norton AntiVirus are affected by CVE-2002-1540?

CVE-2002-1540 affects Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a.

What type of vulnerability is CVE-2002-1540?

CVE-2002-1540 is a local privilege escalation vulnerability that can be exploited by local users.

Who is impacted by CVE-2002-1540?

Local users of affected versions of Symantec Norton AntiVirus Corporate Edition are impacted by CVE-2002-1540.