CVE-2018-18369: High severity symantec endpoint protection vulnerability
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-18369?
The severity of CVE-2018-18369 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2018-18369?
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002 are affected by CVE-2018-18369.
What is a DLL Preloading vulnerability?
A DLL Preloading vulnerability is a type of issue that can occur when an application looks to call a DLL for execution, but the DLL is loaded from a location that is not secure.
How can I fix CVE-2018-18369?
To fix CVE-2018-18369, it is recommended to update Norton Security to version 22.16.3 or later and SEP SBE to Cloud Agent 3.00.31.2817 or later.
Where can I find more information about CVE-2018-18369?
More information about CVE-2018-18369 can be found at the following references: [1] http://www.securityfocus.com/bid/107997 [2] https://support.symantec.com/en_US/article.SYMSA1479.html