CVE-2016-2208 The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system c...
CriticalCVSS 9.1
EPSS 19.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec anti-virus engine | <= 20151.1.0.32 | No fix listed |
References
- 90653 vdb-entry
- 1035903 vdb-entry
- www.symantec.com vendor-advisory
- bugs.chromium.org
- 39835 exploit