Vulnerability Description
Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Endpoint Protection | nis-22.15.2.22 |
| Symantec | Endpoint Protection Cloud | < 22.16.3 |
| Symantec | Endpoint Protection Cloud Agent | < 3.00.31.2817 |
| Symantec | Norton Security | < 22.16.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/107997Third Party AdvisoryVDB Entry
- https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory
- http://www.securityfocus.com/bid/107997Third Party AdvisoryVDB Entry
- https://support.symantec.com/en_US/article.SYMSA1479.htmlVendor Advisory
FAQ
What is CVE-2018-18369?
CVE-2018-18369 is a vulnerability with a CVSS score of 7.8 (HIGH). Norton Security (Windows client) prior to 22.16.3 and SEP SBE (Windows client) prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22 & SEP-12.1.7484.7002, may be susceptible to a DLL Preloading vulnerabil...
How severe is CVE-2018-18369?
CVE-2018-18369 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-18369?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Endpoint Protection, Symantec Endpoint Protection Cloud, Symantec Endpoint Protection Cloud Agent, Symantec Norton Security.