CVE-2016-5308

MEDIUM 5.5CVE-2016-5308 · Published 12/07/2016 · updated 17/06/2026

In short

CVE-2016-5308 is a MEDIUM (CVSS 5.5) vulnerability affecting client intrusion detection system (symantec).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.1% of all vulnerabilities.
Fix: update to 15.0.6, 15.1.2 or later.

Package	Affected versions	Patched versions
client intrusion detection system symantec	`< 15.0.6< 15.1.2`	`15.0.615.1.2`

Description

The Client Intrusion Detection System (CIDS) driver before 15.0.6 in Symantec Endpoint Protection (SEP) and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service (memory corruption and system crash) via a malformed Portable Executable (PE) file.

References

securityfocus.com/bid/91608 · Third Party Advisory
securitytracker.com/id/1036264 · Third Party Advisory
securitytracker.com/id/1036265 · Third Party Advisory
symantec.com/security_response/securityupdates/detail.jsp · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free