Symantec Norton 360 vulnerabilities

14 CVEs affecting Symantec Norton 360, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5311, published 2020-01-09.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2211, published 2016-06-30. High severity, CVSS 7.8. EPSS: 53.4% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3645, published 2016-06-30. Critical severity, CVSS 9.8. EPSS: 24.6% chance of exploitation in the next 30 days. Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2209, published 2016-06-30. High severity, CVSS 7.3. EPSS: 20.9% chance of exploitation in the next 30 days. Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…
CVE-2016-2207, published 2016-06-30. High severity, CVSS 8.4. EPSS: 18.1% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3646, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3644, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-2210, published 2016-06-30. High severity, CVSS 7.3. EPSS: 11.4% chance of exploitation in the next 30 days. Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2010-0107, published 2010-02-23. High severity, CVSS 9.3. EPSS: 6.5% chance of exploitation in the next 30 days. Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security…
CVE-2008-0312, published 2008-04-08. High severity, CVSS 9.3. EPSS: 6.1% chance of exploitation in the next 30 days. Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, including Norton 360 1.0, AntiVirus 2006 through 2008, Internet…
CVE-2008-0313, published 2008-04-08. Medium severity, CVSS 6.8. EPSS: 4% chance of exploitation in the next 30 days. The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products including Norton 360 1.0, AntiVirus 2006 through…

Latest

CVE-2016-5311, published 2020-01-09. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. A Privilege Escalation vulnerability exists in Symantec Norton Antivirus, Norton AntiVirus with Backup, Norton Security, Norton Security with Backup, Norton Internet Security, Norton 360, Endpoint…
CVE-2011-3477, published 2018-02-19. Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days. GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys), as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010, Symantec System Recovery 2011, Norton 360, and Norton Ghost, allows local…