CVE-2016-6590 A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Sui...
HighCVSS 7.8
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec encryption desktop | >= 10.0.0, < 10.4.1 | 10.4.1 |
| symantec endpoint encryption | >= 7.0, < 7.6 | 7.6 |
| symantec endpoint encryption | = 7.6 | No fix listed |
| symantec ghost solution suite | = 3.1 | No fix listed |
| symantec ghost solution suite | = 3.1-maintenance_pack1 | No fix listed |
| symantec ghost solution suite | = 3.1-maintenance_pack2 | No fix listed |
| symantec ghost solution suite | = 3.1-maintenance_pack3 | No fix listed |
| symantec it management suite | = 7.6 | No fix listed |
| symantec it management suite | = 8.0 | No fix listed |
| symantec it management suite | = 8.0 prior to 8.0 HF4 and 7.6 prior to 7.6 HF7 | No fix listed |
| symantec ghost solution suite | = 3.1 prior to 3.1 MP4 | No fix listed |
| Symantec Endpoint Virtualization | = 7.x prior to 7.6 HF | No fix listed |
| symantec encryption desktop | = 0.x prior to 10.4.1 | No fix listed |
References
- www.securityfocus.com third-party-advisory vdb-entry
- www.securitytracker.com third-party-advisory vdb-entry
- support.symantec.com vendor-advisory