1. Home
  2. CVE Database
  3. CVE-2015-8113
HIGH · 7.2

CVE-2015-8113

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install packag...

Vulnerability Description

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.

CVSS Score

7.2

HIGH

AV:L/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
SymantecEndpoint Protection<= 12.1

References

FAQ

What is CVE-2015-8113?

CVE-2015-8113 is a vulnerability with a CVSS score of 7.2 (HIGH). Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install packag...

How severe is CVE-2015-8113?

CVE-2015-8113 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-8113?

Check the references section above for vendor advisories and patch information. Affected products include: Symantec Endpoint Protection.