CVE-2002-1540

CVE-2002-1540 describes a privilege escalation vulnerability affecting Symantec Norton AntiVirus Corporate Edition versions 7.5.x prior to 7.5.1 Build 62 and 7.6.x prior to 7.6.1 Build 35a. The client component of these products executes winhlp32 with elevated privileges, enabling local users to gain SYSTEM-level access through specific winhlp32 functionalities. With a CVSS score of 7.2 (AV:L/AC:L/Au:N/C:C/I:C/A:C), this vulnerability is considered highly severe due to its local attack vector, low complexity, and complete impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, nor publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential interest.