CVE-2016-6590 Privilege escalation in Encryption Desktop

What is CVE-2016-6590?

CVE-2016-6590 is a high-severity vulnerability in Symantec Encryption Desktop, published on 8 Jan 2020. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.

Weakness: CWE-269

Which versions are affected by CVE-2016-6590?

It affects 4 products.

Products include Symantec Encryption Desktop, Symantec Endpoint Encryption, Symantec Ghost Solution Suite, Symantec It Management Suite.

How do I fix CVE-2016-6590?

No fix has been published for CVE-2016-6590 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-6590 being exploited?

There is no known exploitation of CVE-2016-6590 in the wild and no public exploit code.

Other vulnerabilities in Symantec Encryption Desktop

• CVE-2012-4351 Integer overflow in n/a Medium 6.9
• CVE-2013-1610 Privilege escalation in n/a Medium 6.8
• CVE-2017-6330 Denial of service in Symantec Encryption Desktop Medium 6.5
• CVE-2017-13682 Information disclosure in Symantec Encryption Desktop Medium 5.7
• CVE-2014-3436 Denial of service in n/a Medium 5.0

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-7j42-ggv7-2p5p.