SecuritySpace - CVE-2018-5235

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2018-5235

Description: Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.

Test IDs: 1.3.6.1.4.1.25623.1.0.814309

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2018-5235
BugTraq ID: 105099
http://www.securityfocus.com/bid/105099

CVE ID:	CVE-2018-5235
Description:	Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, it will generally follow a specific search path to locate the DLL. The vulnerability can be exploited by a simple file write (or potentially an over-write) which results in a foreign DLL running under the context of the application.
Test IDs:	1.3.6.1.4.1.25623.1.0.814309
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5235 BugTraq ID: 105099 http://www.securityfocus.com/bid/105099