VULNERABILITY INTELLIGENCE
CVE-2016-6592
CVSS score7.8 HIGH
EPSS probability0.96%
CISA KEVNot currently listed
Published2020-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Third Party Advisory, VDB Entry
- secure@symantec.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory