关键信息 EDB-ID: 40031 CVE: 2016-2207 Author: GOOGLE SECURITY RESEARCH Type: DOS Platform: MULTIPLE Date: 2016-06-29 Vulnerable App: Symantec AntiVirus Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=810 Vulnerability Overview: The "Decomposer" component of the Symantec Antivirus scan engine, which handles unpacking various archive formats like ZIP and RAR, uses an outdated version of the unrar package (4.1.4) that contains multiple publicly known vulnerabilities. These can lead to remote code execution as NT AUTHORITY\SYSTEM on Windows and root on Linux and Mac. Affected Products: - Norton Antivirus, Windows - Symantec Endpoint Protection, Linux and Windows - Symantec Scan Engine, Linux and Windows Proof of Concept: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40031.zip Exploit Code: A fragment demonstrating modification of an arbitrary index in the PlaceA[] array via Unpack::ShortLZ().