CVE-2015-8113

HIGH 7.2CVE-2015-8113 · Published 12/11/2015 · updated 17/06/2026

In short

CVE-2015-8113 is a HIGH (CVSS 7.2) vulnerability affecting endpoint protection (symantec).
Chance of exploitation in the next 30 days (EPSS): 0.47%, higher than 41.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
endpoint protection symantec	`≤ 12.1`	No fix yet

Description

Untrusted search path vulnerability in the client in Symantec Endpoint Protection (SEP) 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492.

References

securityfocus.com/bid/77585
symantec.com/security_response/securityupdates/detail.jsp · Vendor Advisory

More vulnerabilities in endpoint protection

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free