High severity7.8NVD Advisory· Published Nov 29, 2018· Updated Jun 17, 2026
CVE-2018-12245
CVE-2018-12245
Description
Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only manifests at install time; no remediation is required for software that has already been installed. This issue only impacted the Trialware media for Symantec Endpoint Protection, which has since been updated.
Affected products
3cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:*:*:*range: >=11.0,<=14.2.0.1
- (no CPE)range: <14.2 MP1
- Symantec Corporation/Symantec Endpoint Protection (SEP)v5Range: Prior to 14.2 MP1
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/105919nvdThird Party AdvisoryVDB Entry
- support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.