VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 25, 2019· Updated Jun 17, 2026

CVE-2018-18367

CVE-2018-18367

Description

Symantec Endpoint Protection Manager (SEPM) prior to and including 12.1 RU6 MP9 and prior to 14.2 RU1 may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead.

Affected products

34
  • Symantec/Endpoint Protection Manager33 versions
    cpe:2.3:a:symantec:endpoint_protection_manager:12.1:rtm:*:*:*:*:*:*+ 32 more
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:rtm:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1-mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2-mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru3:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1a:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4-mp1b:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru4a:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru5:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp1a:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp3:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp4:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp5:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp6:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp7:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp8:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6-mp9:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:12.1:ru6:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.0.1:mp2:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.1:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.2:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14.2:mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14:*:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14:mp1:*:*:*:*:*:*
    • cpe:2.3:a:symantec:endpoint_protection_manager:14:mp2:*:*:*:*:*:*
    • (no CPE)range: <=12.1 RU6 MP9, <14.2 RU1
  • Symantec Corporation/Symantec Endpoint Protection Managerv5
    Range: Prior to and including 12.1 RU6 MP9

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.