CVE-2016-5310 describes a denial-of-service vulnerability in the RAR file parser component of Symantec's AntiVirus Decomposer engine, impacting numerous Symantec products including Endpoint Protection, Mail Security, and Messaging Gateway. This flaw allows a remote attacker to trigger memory corruption and a denial of service by providing a specially crafted RAR file during decompression. Rated with a CVSS score of 5.5 (Medium), the vulnerability requires user interaction (e.g., opening a malicious file) and has a low attack complexity, with the primary impact being high availability loss. While not actively exploited in the wild, an exploit (EDB-40405) exists on ExploitDB, though there is no evidence of widespread community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:broadcom:symantec_data_center_security_server:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:symantec:advanced_threat_protection:-:*:*:*:*:*:*:* | ||
<= 10.0.4CPE matchmatch criteria | cpe:2.3:a:symantec:csapi:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:symantec:email_security.cloud:-:*:*:*:*:*:*:* | ||
<= 12.1.4CPE matchmatch criteria | cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:mac:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.