CVE-2016-2208

Critical

Published: 19/05/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service via a malformed PE header file.

Risk Assessment

Attackers can exploit this vulnerability to gain control over the system or cause it to crash, potentially leading to significant disruptions in organizational operations.

Recommendation

It is recommended to update the Symantec Anti-Virus Engine to version 20151.1.1.4 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

The kernel component in Symantec Anti-Virus Engine (AVE) 20151.1 before 20151.1.1.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory access violation and system crash) via a malformed PE header file.