Read the docs
TI-2017-11352 Aliases CVE-2017-15530GHSA-5jhv-69mf-p72j

Information disclosure in Symantec Norton Family Android App

Priority LOW 16CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Prior to 4.4.1.10, the Norton Family Android App can be susceptible to an Information Disclosure issue. Information disclosure is a very common issue that attackers will attempt to exploit as a first pass across the application. As they probe the application they will take note of anything that may seem out of place or any bit of information they can use to their advantage such as error messages, system information, user data, version numbers, component names, URL paths, or even simple typos and misspellings.

Why it matters now

EPSS 0.00344 28th percentileScored 2026-11-07
Fix Fixed Norton Family Android App (Symantec Corporation): 4.4.1.10

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SymantecNorton Family Android Appbefore 4.4.1.104.4.1.10Patch availableCNA
  • Norton Family Android App VendorSymantec Affected before 4.4.1.10 Fixed in 4.4.1.10 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:symantec:norton_family:*:*:*:*:*:android:*:*before 4.4.1.10VulnerableSymantec
  • cpe:2.3:a:symantec:norton_family:*:*:*:*:*:android:*:* Versions before 4.4.1.10 Vulnerable ·Symantec

Remediation

  • Fix · CNA Norton Family Android App (Symantec Corporation) Fixed in 4.4.1.10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-15530
  2. 2026-10-03 Alias added: GHSA-5jhv-69mf-p72j

References

Advisory 1

  • TI-2016-04607 Uncontrolled search path in Symantec Norton Antivirus, Norton AntiVirus with Backup… CVSS 3.1HIGH 7.8
  • TI-2017-11351 Uncontrolled resource consumption in Symantec Norton Family Android App CVSS 3.0MEDIUM 6.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences