Hi guys,
Below article was published in www.securityweek.com By Eduard Kovacs on November 16, 2016, can anyone update me on this as we are also using one of the product mentioned in the article.
"Symantec informed customers on Tuesday that it has addressed a DLL loading flaw in several of its enterprise products. These types of vulnerabilities affect software from many major vendors, but they are often seen as low risk issues.
The DLL hijacking flaw, tracked as CVE-2016-6590, was brought to Symantec’s attention by one of its employees, senior threat analysis engineer Himanshu Mehta. The security hole affects Symantec’s IT Management Suite (ITMS) 8.0, Ghost Solution Suite (GSS) 3.1 and Endpoint Virtualization (SEV) 7.x. Updates have been released for each of the vulnerable products."
Please Advice!
Source: http://www.securityweek.com/symantec-patches-dll-hijacking-flaw-enterprise-products