CVE-2016-6592

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
Symantec	Norton Download Manager	2016

References

http://www.securityfocus.com/bid/94695Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95444Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037622Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037623Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037624Third Party Advisory, VDB Entry
https://support.symantec.com/us/en/article.SYMSA1394.htmlVendor Advisory
http://www.securityfocus.com/bid/94695Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/95444Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037622Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037623Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037624Third Party Advisory, VDB Entry
https://support.symantec.com/us/en/article.SYMSA1394.htmlVendor Advisory

Timeline

Published: Jan 14, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-65937.8A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let CVE-2016-65947.5Blue Coat Advanced Secure Gateway 6.6, CacheFlow 3.4, ProxySG 6.5 and 6.6 allows remote attackers to bypass blocked requests, user authentic CVE-2016-65956.5The SwarmKit toolkit 1.12.0 for Docker allows remote authenticated users to cause a denial of service (prevention of cluster joins) via a lo CVE-2016-65978.6Sophos EAS Proxy before 6.2.0 for Sophos Mobile Control, when Lotus Traveler is enabled, allows remote attackers to access arbitrary web-res CVE-2016-65989.8BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This ser CVE-2016-65999.8BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting configuration service (ConfigurationService) on port 9010. This CVE-2016-66009.8Directory traversal vulnerability in the file upload functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to uploa CVE-2016-66017.5Directory traversal vulnerability in the file download functionality in ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to rea CVE-2016-66029.8ZOHO WebNMS Framework 5.2 and 5.2 SP1 use a weak obfuscation algorithm to store passwords, which allows context-dependent attackers to obtai CVE-2016-66039.8ZOHO WebNMS Framework 5.2 and 5.2 SP1 allows remote attackers to bypass authentication and impersonate arbitrary users via the UserName HTTP CVE-2016-66049.8NULL pointer dereference in Samsung Exynos fimg2d driver for Android L(5.0/5.1) and M(6.0) allows attackers to have unspecified impact via u CVE-2016-66057.5Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.