CVE-2018-12245

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-11-29 · updated 2026-06-17
Weakness: CWE-426

Description

Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only manifests at install time; no remediation is required for software that has already been installed. This issue only impacted the Trialware media for Symantec Endpoint Protection, which has since been updated.

Affected products

Symantec Endpoint Protection: from 11.0 through 14.2.0.1

References

http://www.securityfocus.com/bid/105919
https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html
http://www.securityfocus.com/bid/105919
https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1468.html

Get alerted when CVE-2018-12245 or the next vulnerability affects your stack