Vulnerability Description
A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted JavaScript.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Norton Mobile Security | < 3.16 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/93900Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037225Third Party AdvisoryVDB Entry
- https://support.symantec.com/us/en/article.symsa1384.htmlVendor Advisory
- http://www.securityfocus.com/bid/93900Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037225Third Party AdvisoryVDB Entry
- https://support.symantec.com/us/en/article.symsa1384.htmlVendor Advisory
FAQ
What is CVE-2016-6585?
CVE-2016-6585 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A Denial of Service vulnerability exists in Symantec Norton Mobile Security for Android prior to 3.16, which could let a remote malicious user conduct a man-in-the-middle attack via specially crafted ...
How severe is CVE-2016-6585?
CVE-2016-6585 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-6585?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Norton Mobile Security.