Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2016-5309 Details

Description

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://bugs.chromium.org/p/project-zero/issues/detail?id=867	CVE	ExploitPatchThird Party Advisory
https://www.exploit-db.com/exploits/40405/	CVE	ExploitThird Party AdvisoryVDB Entry
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00	CVE	Vendor Advisory
http://www.securityfocus.com/bid/92868	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036847	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036848	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036849	CVE	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036850	CVE	Third Party AdvisoryVDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=867	[email protected]	ExploitPatchThird Party Advisory
https://www.exploit-db.com/exploits/40405/	[email protected]	ExploitThird Party AdvisoryVDB Entry
https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160919_00	[email protected]	Vendor Advisory
http://www.securityfocus.com/bid/92868	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036847	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036848	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036849	[email protected]	Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1036850	[email protected]	Third Party AdvisoryVDB Entry

see all 16 references

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-125	Out-of-bounds Read	[email protected]

Affected Products

Product	Versions
broadcom symantec data center security server	All versions
CPE cpe:2.3:a:broadcom:symantec_data_center_security_server:-:::::::* Remediation No remediation found in references.
symantec advanced threat protection	All versions
CPE cpe:2.3:a:symantec:advanced_threat_protection:-:::::::* Remediation No remediation found in references.
symantec csapi	<= 10.0.4
CPE cpe:2.3:a:symantec:csapi:::::::: Remediation No remediation found in references.
symantec email security.cloud	All versions
CPE cpe:2.3:a:symantec:email_security.cloud:-:::::::* Remediation No remediation found in references.
symantec endpoint protection	<= 12.1.4 <= 12.1.6
CPE cpe:2.3:a:symantec:endpoint_protection::::::mac::* cpe:2.3:a:symantec:endpoint_protection::::::linux::* cpe:2.3:a:symantec:endpoint_protection::::::windows::* Remediation No remediation found in references.
symantec endpoint protection cloud	All versions
CPE cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::mac:: cpe:2.3:a:symantec:endpoint_protection_cloud:-:::::windows:: Remediation No remediation found in references.
symantec endpoint protection for small business	<= 12.1
CPE cpe:2.3:a:symantec:endpoint_protection_for_small_business:::::::: cpe:2.3:a:symantec:endpoint_protection_for_small_business:-::::enterprise::: Remediation No remediation found in references.
symantec mail security for domino	<= 8.0.9 8.1.2 8.1.3
CPE cpe:2.3:a:symantec:mail_security_for_domino:::::::: cpe:2.3:a:symantec:mail_security_for_domino:8.1.2:::::::* cpe:2.3:a:symantec:mail_security_for_domino:8.1.3:::::::* Remediation No remediation found in references.
symantec mail security for microsoft exchange	<= 6.5.8 7.0 7.0.1 7.0.2 7.0.3
CPE cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:::::::: cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.1:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.2:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.3:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.4:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.1:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.2:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.3:::::::* cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.4:::::::* Remediation No remediation found in references.
symantec messaging gateway	<= 10.6.1
CPE cpe:2.3:a:symantec:messaging_gateway:::::::: Remediation No remediation found in references.
symantec messaging gateway for service providers	10.5 10.6
CPE cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.5:::::::* cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.6:::::::* Remediation No remediation found in references.
symantec protection engine	<= 7.0.5 7.5.0 7.5.1 7.5.2 7.5.3
CPE cpe:2.3:a:symantec:protection_engine:::::::: cpe:2.3:a:symantec:protection_engine:7.5.0:::::::* cpe:2.3:a:symantec:protection_engine:7.5.1:::::::* cpe:2.3:a:symantec:protection_engine:7.5.2:::::::* cpe:2.3:a:symantec:protection_engine:7.5.3:::::::* cpe:2.3:a:symantec:protection_engine:7.5.4:::::::* cpe:2.3:a:symantec:protection_engine:7.5.5:::::::* cpe:2.3:a:symantec:protection_engine:7.8.0:::::::* Remediation No remediation found in references.
symantec protection for sharepoint servers	6.0.3 6.0.4 6.0.5 6.0.6 6.0.7
CPE cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.3:::::::* cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.4:::::::* cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.5:::::::* cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.6:::::::* cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.7:::::::* Remediation No remediation found in references.
symantec web gateway	All versions
CPE cpe:2.3:a:symantec:web_gateway:-:::::::* Remediation No remediation found in references.
symantec web security.cloud	All versions
CPE cpe:2.3:a:symantec:web_security.cloud:-:::::::* Remediation No remediation found in references.

Change History

6 change records found show changes

Date	Action	Recorded By
Jun 17, 2026	CVE Modified	[email protected]
May 13, 2026	CVE Status Change	[email protected]
Nov 21, 2024	CVE Modified	CVE
May 14, 2024	CVE Modified	[email protected]
Sep 9, 2021	Reanalysis	[email protected]
Apr 25, 2017	Initial Analysis	[email protected]

CVE-2016-5309 Details

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Affected Products

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

CPE

Remediation

Change History

QUICK INFO