|
[Japanese]
|
JVNDB-2022-000017
|
Norton Security for Mac improperly processes ICMP packets
|
|
Norton Security for Mac provided by NortonLifeLock Inc. is antivirus software.
Norton Security for Mac improperly processes ICMP packets, which may result in OS to crash (CWE-20).
Yuki Meguro of Tohoku Information Systems Company, Incorporated reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
|
|
CVSS V3 Severity:
Base Metrics 7.1 (High) [IPA Score]
- Attack Vector: Local
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Changed
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: High
CVSS V2 Severity:
Base Metrics 4.9 (Medium) [IPA Score]
- Access Vector: Local
- Access Complexity: Low
- Authentication: None
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Complete
|
|
|
NortonLifeLock Inc.
- Norton Security for Mac versions prior to 8.6.6
|
|
|
An unprivileged user may cause a denial-of-service (DoS) condition on the OS.
|
|
[Update the Software]
Update the software to the latest version according to the information provided by the developer.
The developer states that the vulnerability does not exist if the product is updated to version 8.6.6 or later, with macOS 10.15 or later.
|
|
NortonLifeLock Inc.
|
|
- Improper Input Validation(CWE-20) [IPA Evaluation]
|
|
|
|
- JVN : JVN#87683137
|
|
- [2022/03/03]
Web page was published
|
