The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced…
Priority LOW 35CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-125 and the CVSS impact.
Summary
The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows before 12.1.6 MP5; Symantec Endpoint Protection (SEP) for Mac; Symantec Endpoint Protection (SEP) for Linux before 12.1.6 MP6; Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud); Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac; Symantec Endpoint Protection Small Business Edition 12.1; CSAPI before 10.0.4 HF02; Symantec Protection Engine (SPE) before 7.0.5 HF02, 7.5.x before 7.5.4 HF02, 7.5.5 before 7.5.5 HF01, and 7.8.x before 7.8.0 HF03; Symantec Mail Security for Domino (SMSDOM) before 8.0.9 HF2.1, 8.1.x before 8.1.2 HF2.3, and 8.1.3 before 8.1.3 HF2.2; Symantec Mail Security for Microsoft Exchange (SMSMSE) before 6.5.8_3968140 HF2.3, 7.x before 7.0_3966002 HF2.1, and 7.5.x before 7.5_3966008 VHF2.2; Symantec Protection for SharePoint Servers (SPSS) before SPSS_6.0.3_To_6.0.5_HF_2.5 update, 6.0.6 before 6.0.6 HF_2.6, and 6.0.7 before 6.0.7_HF_2.7; Symantec Messaging Gateway (SMG) before 10.6.2; Symantec Messaging Gateway for Service Providers (SMG-SP) before 10.5 patch 260 and 10.6 before patch 259; Symantec Web Gateway; and Symantec Web Security.Cloud allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted RAR file that is mishandled during decompression.
Why it matters now
EPSS 0.06877 94th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 43
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:broadcom:symantec_data_center_security_server:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Broadcom |
| cpe:2.3:a:symantec:advanced_threat_protection:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:csapi:*:*:*:*:*:*:*:* | up to 10.0.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:email_security.cloud:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:mac:*:* | up to 12.1.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:linux:*:* | up to 12.1.6 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:windows:*:* | up to 12.1.6 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection_cloud:-:*:*:*:*:mac:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection_cloud:-:*:*:*:*:windows:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:endpoint_protection_for_small_business:*:*:*:*:*:*:*:* | up to 12.1 | Vulnerable | Symantec |
- cpe:2.3:a:broadcom:symantec_data_center_security_server:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Broadcom
- cpe:2.3:a:symantec:advanced_threat_protection:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:csapi:*:*:*:*:*:*:*:* Versions up to 10.0.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:email_security.cloud:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:mac:*:* Versions up to 12.1.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:linux:*:* Versions up to 12.1.6 Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection:*:*:*:*:*:windows:*:* Versions up to 12.1.6 Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection_cloud:-:*:*:*:*:mac:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection_cloud:-:*:*:*:*:windows:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:endpoint_protection_for_small_business:*:*:*:*:*:*:*:* Versions up to 12.1 Vulnerable ·Symantec
Show 33 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:symantec:endpoint_protection_for_small_business:-:*:*:*:enterprise:*:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_domino:*:*:*:*:*:*:*:* | up to 8.0.9 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_domino:8.1.2:*:*:*:*:*:*:* | 8.1.2 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_domino:8.1.3:*:*:*:*:*:*:* | 8.1.3 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:* | up to 6.5.8 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.1:*:*:*:*:*:*:* | 7.0.1 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.3:*:*:*:*:*:*:* | 7.0.3 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.4:*:*:*:*:*:*:* | 7.0.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5:*:*:*:*:*:*:* | 7.5 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.1:*:*:*:*:*:*:* | 7.5.1 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.2:*:*:*:*:*:*:* | 7.5.2 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.3:*:*:*:*:*:*:* | 7.5.3 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.4:*:*:*:*:*:*:* | 7.5.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:* | up to 10.6.1 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.5:*:*:*:*:*:*:* | 10.5 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.6:*:*:*:*:*:*:* | 10.6 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:*:*:*:*:*:*:*:* | up to 7.0.5 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.0:*:*:*:*:*:*:* | 7.5.0 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.1:*:*:*:*:*:*:* | 7.5.1 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.2:*:*:*:*:*:*:* | 7.5.2 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.3:*:*:*:*:*:*:* | 7.5.3 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.4:*:*:*:*:*:*:* | 7.5.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.5.5:*:*:*:*:*:*:* | 7.5.5 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_engine:7.8.0:*:*:*:*:*:*:* | 7.8.0 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.3:*:*:*:*:*:*:* | 6.0.3 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.4:*:*:*:*:*:*:* | 6.0.4 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.5:*:*:*:*:*:*:* | 6.0.5 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.6:*:*:*:*:*:*:* | 6.0.6 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.7:*:*:*:*:*:*:* | 6.0.7 | Vulnerable | Symantec |
| cpe:2.3:a:symantec:web_gateway:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Symantec |
| cpe:2.3:a:symantec:web_security.cloud:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Symantec |
- cpe:2.3:a:symantec:endpoint_protection_for_small_business:-:*:*:*:enterprise:*:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_domino:*:*:*:*:*:*:*:* Versions up to 8.0.9 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_domino:8.1.2:*:*:*:*:*:*:* Versions 8.1.2 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_domino:8.1.3:*:*:*:*:*:*:* Versions 8.1.3 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:*:*:*:*:*:*:*:* Versions up to 6.5.8 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.1:*:*:*:*:*:*:* Versions 7.5.1 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.2:*:*:*:*:*:*:* Versions 7.5.2 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.3:*:*:*:*:*:*:* Versions 7.5.3 Vulnerable ·Symantec
- cpe:2.3:a:symantec:mail_security_for_microsoft_exchange:7.5.4:*:*:*:*:*:*:* Versions 7.5.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:messaging_gateway:*:*:*:*:*:*:*:* Versions up to 10.6.1 Vulnerable ·Symantec
- cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.5:*:*:*:*:*:*:* Versions 10.5 Vulnerable ·Symantec
- cpe:2.3:a:symantec:messaging_gateway_for_service_providers:10.6:*:*:*:*:*:*:* Versions 10.6 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:*:*:*:*:*:*:*:* Versions up to 7.0.5 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.0:*:*:*:*:*:*:* Versions 7.5.0 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.1:*:*:*:*:*:*:* Versions 7.5.1 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.2:*:*:*:*:*:*:* Versions 7.5.2 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.3:*:*:*:*:*:*:* Versions 7.5.3 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.4:*:*:*:*:*:*:* Versions 7.5.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.5.5:*:*:*:*:*:*:* Versions 7.5.5 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_engine:7.8.0:*:*:*:*:*:*:* Versions 7.8.0 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.3:*:*:*:*:*:*:* Versions 6.0.3 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.4:*:*:*:*:*:*:* Versions 6.0.4 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.5:*:*:*:*:*:*:* Versions 6.0.5 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.6:*:*:*:*:*:*:* Versions 6.0.6 Vulnerable ·Symantec
- cpe:2.3:a:symantec:protection_for_sharepoint_servers:6.0.7:*:*:*:*:*:*:* Versions 6.0.7 Vulnerable ·Symantec
- cpe:2.3:a:symantec:web_gateway:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Symantec
- cpe:2.3:a:symantec:web_security.cloud:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Symantec
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2016-5309
- 2026-10-03 Alias added: GHSA-v822-2p42-8376
References
Sources
- CVE-2016-5309 · CVE Program
- CVE-2016-5309 · NVD
- FIRST EPSS
- GHSA-v822-2p42-8376 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences