Remote code execution in Symantec VIP Access for Desktop

1) Insecure DLL loading

EUVDB-ID: #VU7995

Risk: Low

CVSSv3.1: 6.6 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2017-6329

CWE-ID: CWE-426 - Untrusted Search Path

Exploit availability: No

Description

The vulnerability allows a local attacker to gain elevated privileges on the target system.

The weakness exists due to untrusted search path element. A local attacker can load a specially crafted .dll file, gain root access and execute arbitrary code with elevated privileges.

Successful exploitation of the vulnerability may result in system compromise.

Mitigation

Update to version 2.2.4.

Vulnerable software versions

VIP Access for Desktop: 1.0.1 - 2.2.3

CPE2.3

• cpe:2.3:a:broadcom:vip_access_for_desktop:2.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:vip_access_for_desktop:2.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:vip_access_for_desktop:2.2.1:*:*:*:*:*:*:*

External links

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&...

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.