First published: Thu May 19 2016(Updated: )
The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file.
Credit: secure@symantec.com
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Antivirus | <=20151.1.0.32 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-2208 has a high severity rating, allowing remote attackers to execute arbitrary code or cause a denial of service.
To fix CVE-2016-2208, update your Symantec Anti-Virus Engine to version 20151.1.1.4 or later.
CVE-2016-2208 affects various versions of the Symantec Anti-Virus Engine prior to 20151.1.1.4.
CVE-2016-2208 is a remote code execution vulnerability stemming from a malformed PE header file.
Yes, CVE-2016-2208 can cause a system crash due to memory access violations.