CVE-2017-15528 Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the pub...
LowCVSS 3.7
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Prior to v 7.6, the Install Norton Security (INS) product can be susceptible to a certificate spoofing vulnerability, which is a type of attack whereby a maliciously procured certificate binds the public key of an attacker to the domain name of the target.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| norton install norton security | < 7.6 | 7.6 |
References
- 101796 third-party-advisory vdb-entry
- www.info-sec.ca third-party-advisory
- www.symantec.com vendor-advisory