NVD Vulnerability Detail

CVE-2016-5309

Summary	The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.
Publication Date	April 15, 2017, 3:59 a.m.
Registration Date	Jan. 26, 2021, 2:13 p.m.
Last Update	Nov. 21, 2024, 11:54 a.m.

CVSS3.1 : MEDIUM
スコア	5.5
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
攻撃元区分(AV)	ローカル
攻撃条件の複雑さ(AC)	低
攻撃に必要な特権レベル(PR)	不要
利用者の関与(UI)	要
影響の想定範囲(S)	変更なし
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	高

CVSS2.0 : MEDIUM
Score	4.3
Vector	AV:N/AC:M/Au:N/C:N/I:N/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	なし
完全性への影響(I)	なし
可用性への影響(A)	低
Get all privileges.	いいえ
Get user privileges	いいえ
Get other privileges	いいえ
User operation required	はい

Affected software configurations

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:symantec:protection_engine::::::::		7.0.5
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange::::::::		6.5.8
cpe:2.3:a:symantec:messaging_gateway::::::::		10.6.1
cpe:2.3:a:symantec:mail_security_for_domino::::::::		8.0.9
cpe:2.3:a:symantec:endpoint_protection::::::mac::*		12.1.4
cpe:2.3:a:symantec:mail_security_for_domino:8.1.3:::::::*
cpe:2.3:a:symantec:endpoint_protection_for_small_business::::::::		12.1
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.3:::::::*
cpe:2.3:a:symantec:web_security.cloud:-:::::::*
cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.6:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.3:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.4:::::::*
cpe:2.3:a:symantec:endpoint_protection::::::linux::*		12.1.6
cpe:2.3:a:symantec:protection_engine:7.5.0:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.2:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.1:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.7:::::::*
cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.5:::::::*
cpe:2.3:a:symantec:advanced_threat_protection:-:::::::*
cpe:2.3:a:symantec:mail_security_for_domino:8.1.2:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.4:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.1:::::::*
cpe:2.3:a:symantec:email_security.cloud:-:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.4:::::::*
cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::mac::
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.3:::::::*
cpe:2.3:a:symantec:csapi::::::::		10.0.4
cpe:2.3:a:symantec:endpoint_protection_for_small_business:-::::enterprise:::
cpe:2.3:a:symantec:endpoint_protection::::::windows::*		12.1.6
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.6:::::::*
cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::windows::
cpe:2.3:a:symantec:protection_engine:7.8.0:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.3:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.2:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.4:::::::*
cpe:2.3:a:symantec:web_gateway:-:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.2:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.1:::::::*
cpe:2.3:a:broadcom:symantec_data_center_security_server:-:::::::*

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/92868	Third Party Advisory VDB Entry
2	http://www.securityfocus.com/bid/92868	Third Party Advisory VDB Entry
3	http://www.securitytracker.com/id/1036847	Third Party Advisory VDB Entry
4	http://www.securitytracker.com/id/1036847	Third Party Advisory VDB Entry
5	http://www.securitytracker.com/id/1036848	Third Party Advisory VDB Entry
6	http://www.securitytracker.com/id/1036848	Third Party Advisory VDB Entry
7	http://www.securitytracker.com/id/1036849	Third Party Advisory VDB Entry
8	http://www.securitytracker.com/id/1036849	Third Party Advisory VDB Entry
9	http://www.securitytracker.com/id/1036850	Third Party Advisory VDB Entry
10	http://www.securitytracker.com/id/1036850	Third Party Advisory VDB Entry
11	https://bugs.chromium.org/p/project-zero/issues/detail?id=867	Exploit Patch Third Party Advisory
12	https://bugs.chromium.org/p/project-zero/issues/detail?id=867	Exploit Patch Third Party Advisory
13	https://www.exploit-db.com/exploits/40405/	Exploit Third Party Advisory VDB Entry
14	https://www.exploit-db.com/exploits/40405/	Exploit Third Party Advisory VDB Entry
15	https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00	Vendor Advisory
16	https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-125	境界外読み取り	https://cwe.mitre.org/data/definitions/125.html

JVN Vulnerability Information

複数の Symantec 製品の AntiVirus Decomposer エンジンの RAR ファイルパーサコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性

Title	複数の Symantec 製品の AntiVirus Decomposer エンジンの RAR ファイルパーサコンポーネントにおけるサービス運用妨害 (DoS) の脆弱性
Summary	複数の Symantec 製品の AntiVirus Decomposer エンジンの RAR ファイルパーサコンポーネントには、サービス運用妨害 (境界外読み取り) 状態にされる脆弱性が存在します。
Possible impacts	リモートの攻撃者により、解凍の際に誤って処理される巧妙に細工された RAR ファイルを介して、サービス運用妨害 (境界外読み取り) 状態にされる可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Sept. 19, 2016, midnight
Registration Date	May 19, 2017, 5:01 p.m.
Last Update	May 19, 2017, 5:01 p.m.

Affected System

シマンテック

Advanced Threat Protection

CSAPI

Messaging Gateway for Service Providers

Symantec Data Center Security:Server

Symantec Email Security.Cloud

Symantec Endpoint Protection

Symantec Endpoint Protection Cloud

Symantec Endpoint Protection Small Business Edition

Symantec Mail Security for Domino

Symantec Mail Security for Microsoft Exchange

Symantec Messaging Gateway

Symantec Protection Engine

Symantec Protection for SharePoint Servers

Symantec Web Gateway

Symantec Web Security.Cloud

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2016-5309	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-5309
National Vulnerability Database (NVD)
2	CVE-2016-5309	https://nvd.nist.gov/vuln/detail/CVE-2016-5309

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-125	https://cwe.mitre.org/data/definitions/125.html

ベンダー情報

No	Name	URL
Symantec Security Advisory
1	SYM16-015	https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00

Change Log

No	Changed Details	Date of change
0	[2017年05月19日] 掲載	Feb. 17, 2018, 10:37 a.m.

Configuration1	or higher	or less	more than	less than
cpe:2.3:a:symantec:protection_engine::::::::		7.0.5
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange::::::::		6.5.8
cpe:2.3:a:symantec:messaging_gateway::::::::		10.6.1
cpe:2.3:a:symantec:mail_security_for_domino::::::::		8.0.9
cpe:2.3:a:symantec:endpoint_protection::::::mac::*		12.1.4
cpe:2.3:a:symantec:mail_security_for_domino:8.1.3:::::::*
cpe:2.3:a:symantec:endpoint_protection_for_small_business::::::::		12.1
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.3:::::::*
cpe:2.3:a:symantec:web_security.cloud:-:::::::*
cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.6:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.3:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.4:::::::*
cpe:2.3:a:symantec:endpoint_protection::::::linux::*		12.1.6
cpe:2.3:a:symantec:protection_engine:7.5.0:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.2:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.1:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.7:::::::*
cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.5:::::::*
cpe:2.3:a:symantec:advanced_threat_protection:-:::::::*
cpe:2.3:a:symantec:mail_security_for_domino:8.1.2:::::::*
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.4:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.1:::::::*
cpe:2.3:a:symantec:email_security.cloud:-:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.4:::::::*
cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::mac::
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.3:::::::*
cpe:2.3:a:symantec:csapi::::::::		10.0.4
cpe:2.3:a:symantec:endpoint_protection_for_small_business:-::::enterprise:::
cpe:2.3:a:symantec:endpoint_protection::::::windows::*		12.1.6
cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.6:::::::*
cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::windows::
cpe:2.3:a:symantec:protection_engine:7.8.0:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.3:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.2:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.4:::::::*
cpe:2.3:a:symantec:web_gateway:-:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.2:::::::*
cpe:2.3:a:symantec:protection_engine:7.5.5:::::::*
cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.1:::::::*
cpe:2.3:a:broadcom:symantec_data_center_security_server:-:::::::*