Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for vip_access_desktop by symantec

    CVE-2016-6593 (GCVE-0-2016-6593)

    Vulnerability from nvd – Published: 2020-01-08 15:02 – Updated: 2024-08-06 01:36
    VLAI
    Summary
    A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.
    Severity
    No CVSS data available.
    CWE
    • untrusted search path
    Assigner
    Impacted products
    Vendor Product Version
    Symantec VIP Access Desktop Affected: before 2.2.2
    Create a notification for this product.
    Date Public
    2016-12-09 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T01:36:28.442Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/94731"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.symantec.com/us/en/article.symsa1388.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "VIP Access Desktop",
              "vendor": "Symantec",
              "versions": [
                {
                  "status": "affected",
                  "version": "before 2.2.2"
                }
              ]
            }
          ],
          "datePublic": "2016-12-09T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "untrusted search path",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2020-01-08T15:02:07.000Z",
            "orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
            "shortName": "symantec"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.securityfocus.com/bid/94731"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.symantec.com/us/en/article.symsa1388.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@symantec.com",
              "ID": "CVE-2016-6593",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "VIP Access Desktop",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "before 2.2.2"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Symantec"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "untrusted search path"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html",
                  "refsource": "MISC",
                  "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
                },
                {
                  "name": "http://www.securityfocus.com/bid/94731",
                  "refsource": "MISC",
                  "url": "http://www.securityfocus.com/bid/94731"
                },
                {
                  "name": "http://www.securityfocus.com/archive/1/539889/100/0/threaded",
                  "refsource": "MISC",
                  "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
                },
                {
                  "name": "https://support.symantec.com/us/en/article.symsa1388.html",
                  "refsource": "CONFIRM",
                  "url": "https://support.symantec.com/us/en/article.symsa1388.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
        "assignerShortName": "symantec",
        "cveId": "CVE-2016-6593",
        "datePublished": "2020-01-08T15:02:07.000Z",
        "dateReserved": "2016-08-03T00:00:00.000Z",
        "dateUpdated": "2024-08-06T01:36:28.442Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2016-6593 (GCVE-0-2016-6593)

    Vulnerability from cvelistv5 – Published: 2020-01-08 15:02 – Updated: 2024-08-06 01:36
    VLAI
    Summary
    A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.
    Severity
    No CVSS data available.
    CWE
    • untrusted search path
    Assigner
    Impacted products
    Vendor Product Version
    Symantec VIP Access Desktop Affected: before 2.2.2
    Create a notification for this product.
    Date Public
    2016-12-09 00:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-06T01:36:28.442Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/bid/94731"
              },
              {
                "tags": [
                  "x_refsource_MISC",
                  "x_transferred"
                ],
                "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
              },
              {
                "tags": [
                  "x_refsource_CONFIRM",
                  "x_transferred"
                ],
                "url": "https://support.symantec.com/us/en/article.symsa1388.html"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "VIP Access Desktop",
              "vendor": "Symantec",
              "versions": [
                {
                  "status": "affected",
                  "version": "before 2.2.2"
                }
              ]
            }
          ],
          "datePublic": "2016-12-09T00:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "value": "A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "description": "untrusted search path",
                  "lang": "en",
                  "type": "text"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2020-01-08T15:02:07.000Z",
            "orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
            "shortName": "symantec"
          },
          "references": [
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.securityfocus.com/bid/94731"
            },
            {
              "tags": [
                "x_refsource_MISC"
              ],
              "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
            },
            {
              "tags": [
                "x_refsource_CONFIRM"
              ],
              "url": "https://support.symantec.com/us/en/article.symsa1388.html"
            }
          ],
          "x_legacyV4Record": {
            "CVE_data_meta": {
              "ASSIGNER": "secure@symantec.com",
              "ID": "CVE-2016-6593",
              "STATE": "PUBLIC"
            },
            "affects": {
              "vendor": {
                "vendor_data": [
                  {
                    "product": {
                      "product_data": [
                        {
                          "product_name": "VIP Access Desktop",
                          "version": {
                            "version_data": [
                              {
                                "version_value": "before 2.2.2"
                              }
                            ]
                          }
                        }
                      ]
                    },
                    "vendor_name": "Symantec"
                  }
                ]
              }
            },
            "data_format": "MITRE",
            "data_type": "CVE",
            "data_version": "4.0",
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code."
                }
              ]
            },
            "problemtype": {
              "problemtype_data": [
                {
                  "description": [
                    {
                      "lang": "eng",
                      "value": "untrusted search path"
                    }
                  ]
                }
              ]
            },
            "references": {
              "reference_data": [
                {
                  "name": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html",
                  "refsource": "MISC",
                  "url": "http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.html"
                },
                {
                  "name": "http://www.securityfocus.com/bid/94731",
                  "refsource": "MISC",
                  "url": "http://www.securityfocus.com/bid/94731"
                },
                {
                  "name": "http://www.securityfocus.com/archive/1/539889/100/0/threaded",
                  "refsource": "MISC",
                  "url": "http://www.securityfocus.com/archive/1/539889/100/0/threaded"
                },
                {
                  "name": "https://support.symantec.com/us/en/article.symsa1388.html",
                  "refsource": "CONFIRM",
                  "url": "https://support.symantec.com/us/en/article.symsa1388.html"
                }
              ]
            }
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
        "assignerShortName": "symantec",
        "cveId": "CVE-2016-6593",
        "datePublished": "2020-01-08T15:02:07.000Z",
        "dateReserved": "2016-08-03T00:00:00.000Z",
        "dateUpdated": "2024-08-06T01:36:28.442Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }