Symantec Norton Power Eraser vulnerabilities

8 CVEs affecting Symantec Norton Power Eraser, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5238, published 2018-08-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-2211, published 2016-06-30. High severity, CVSS 7.8. EPSS: 53.4% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3645, published 2016-06-30. Critical severity, CVSS 9.8. EPSS: 24.6% chance of exploitation in the next 30 days. Integer overflow in the TNEF unpacker in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2016-2209, published 2016-06-30. High severity, CVSS 7.3. EPSS: 20.9% chance of exploitation in the next 30 days. Buffer overflow in Dec2SS.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway;…
CVE-2016-2207, published 2016-06-30. High severity, CVSS 8.4. EPSS: 18.1% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3646, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-3644, published 2016-06-30. High severity, CVSS 8.4. EPSS: 17.7% chance of exploitation in the next 30 days. The AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web Gateway; Symantec Endpoint Protection…
CVE-2016-2210, published 2016-06-30. High severity, CVSS 7.3. EPSS: 11.4% chance of exploitation in the next 30 days. Buffer overflow in Dec2LHA.dll in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection (ATP); Symantec Data Center Security:Server (SDCS:S) 6.x through 6.6 MP1; Symantec Web…
CVE-2018-5238, published 2018-08-22. High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days. Norton Power Eraser (prior to 5.3.0.24) and SymDiag (prior to 2.1.242) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an application looks to call…