CVE-2016-6592

HIGH 7.8CVE-2016-6592 · Published 14/01/2020 · updated 17/06/2026

In short

CVE-2016-6592 is a HIGH (CVSS 7.8) vulnerability affecting norton download manager (symantec).
Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.6% of all vulnerabilities.
Fix: update to 5.6 or later.

Package	Affected versions	Patched versions
norton download manager symantec	`< 5.6`	`5.6`

Description

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.

References

securityfocus.com/bid/94695 · Third Party Advisory
securityfocus.com/bid/95444 · Third Party Advisory
securitytracker.com/id/1037622 · Third Party Advisory
securitytracker.com/id/1037623 · Third Party Advisory
securitytracker.com/id/1037624 · Third Party Advisory
support.symantec.com/us/en/article.SYMSA1394.html · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free