Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.
References
Link | Resource |
---|---|
https://support.symantec.com/en_US/article.SYMSA1479.html | Vendor Advisory |
http://www.securityfocus.com/bid/107994 | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2019-04-25 13:29
Updated : 2020-08-24 10:37
NVD link : CVE-2018-18366
Mitre link : CVE-2018-18366
JSON object : View
CWE
CWE-908
Use of Uninitialized Resource
Products Affected
symantec
- endpoint_protection_cloud
- norton_security
- endpoint_protection
- endpoint_protection_cloud_agent