CVE-2016-6592

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-01-14 · updated 2026-06-17
Weakness: CWE-427

Description

A vulnerability was found in Symantec Norton Download Manager versions prior to 5.6. A remote user can create a specially crafted DLL file that, when placed on the target user's system, will cause the Norton Download Manager component to load the remote user's DLL instead of the intended DLL and execute arbitrary code when the Norton Download Manager component is run by the target user.

Affected products

Symantec Norton Download Manager: before 5.6 — fixed in 5.6

How to fix

Upgrade to a fixed version: Symantec Norton Download Manager 5.6. Check the vendor advisory for mitigations.

References

http://www.securityfocus.com/bid/94695
http://www.securityfocus.com/bid/95444
http://www.securitytracker.com/id/1037622
http://www.securitytracker.com/id/1037623
http://www.securitytracker.com/id/1037624
https://support.symantec.com/us/en/article.SYMSA1394.html
http://www.securityfocus.com/bid/94695
http://www.securityfocus.com/bid/95444
http://www.securitytracker.com/id/1037622
http://www.securitytracker.com/id/1037623
http://www.securitytracker.com/id/1037624
https://support.symantec.com/us/en/article.SYMSA1394.html

Get alerted when CVE-2016-6592 or the next vulnerability affects your stack