CVE-2016-6593

A code-execution vulnerability exists during startup in jhi.dll and otpiha.dll in Symantec VIP Access Desktop before 2.2.2, which could let local malicious users execute arbitrary code.

Affected

Symantec · VIP Access Desktop

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

4.4 MEDIUMAV:L/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.81% chance of exploitation in the next 30 days, 56th percentile

Published

2020-01-08

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/140098/Symantec-VIP-Access-Arbitrary-DLL-Execution.h…

Security advisories

• https://support.symantec.com/us/en/article.symsa1388.html
• http://www.securityfocus.com/archive/1/539889/100/0/threaded
• http://www.securityfocus.com/bid/94731

References

• CVE Record
• NVD entry