Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-18366

Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
symantec

Description

Symantec Norton Security prior to 22.16.3, SEP (Windows client) prior to and including 12.1 RU6 MP9, and prior to 14.2 RU1, SEP SBE prior to Cloud Agent 3.00.31.2817, NIS-22.15.2.22, SEP-12.1.7484.7002 and SEP Cloud prior to 22.16.3 may be susceptible to a kernel memory disclosure, which is a type of issue where a specially crafted IRP request can cause the driver to return uninitialized memory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Symantec Corporation Norton Security

  • Prior to 22.16.3affected

Symantec Corporation SEP (Windows client)

  • Prior to and including 12.1 RU6 MP9affected
  • Prior to 14.2 RU1affected

Symantec Corporation SEP SBE

  • Prior to Cloud Agent 3.00.31.2817affected
  • NIS-22.15.2.22affected
  • SEP-12.1.7484.7002affected

Symantec Corporation SEP Cloud

  • Prior to 22.16.3affected

References