CVE:CVE-2016-5309
CNNVD:CNNVD-201609-396
Symantec Advanced Threat Protection: Network（ATP）等都是美国赛门铁克（Symantec）公司的安全产品。ATP是一套用于挖掘并清除终端、网络和电子邮件网关等存在的高级威胁的软件；Symantec Endpoint Protection（SEP）是一套防病毒软件。AntiVirus Decomposer engine是其中的一个反病毒引擎。RAR file parser是其中的一个压缩文件解析组件。
多款Symantec产品中的AntiVirus Decomposer引擎的RAR文件解析器组件存在安全漏洞。远程攻击者可借助特制的RAR文件利用该漏洞造成拒绝服务（越边界读取）。以下产品和版本受到影响：Symantec Email Security.Cloud；Network (ATP)；Symantec Data Center Security: Server；Symantec Endpoint Protection (SEP) for Windows 12.1.6 MP5之前的版本，Symantec Endpoint Protection (SEP) for Mac，Symantec Endpoint Protection (SEP) for Linux 12.1.6 MP6之前的版本，Symantec Endpoint Protection for Small Business Enterprise (SEP SBE/SEP.Cloud)；Symantec Endpoint Protection Cloud (SEPC) for Windows/Mac；Symantec Endpoint Protection Small Business Edition 12.1版本；CSAPI 10.0.4 HF02之前的版本；Symantec Protection Engine (SPE) 7.0.5 HF02之前的版本，7.5.4 HF02之前的7.5.x版本，7.5.5 HF01之前的7.5.5版本，7.8.0 HF03之前的7.8.x版本；Symantec Mail Security for Domino (SMSDOM) 8.0.9 HF2.1之前的版本，8.1.2 HF2.3之前的8.1.x版本，8.1.3 HF2.2之前的8.1.3版本；Symantec Mail Security for Microsoft Exchange (SMSMSE) 6.5.8_3968140 HF2.3之前的版本，7.0_3966002 HF2.1之前的7.x版本，7.5_3966008 VHF2.2之前的7.5.x版本；Symantec Protection for SharePoint Servers (SPSS) SPSS_6.0.3_To_6.0.5_HF_2.5 update之前的版本，6.0.6 HF_2.6之前的6.0.6版本，6.0.7_HF_2.7之前的6.0.7版本；Symantec Messaging Gateway (SMG) 10.6.2之前的版本；Symantec Messaging Gateway for Service Providers (SMG-SP) 10.5 patch 260之前的版本，10.6 patch 259之前的10.6版本；Symantec Web Gateway；Symantec Web Security.Cloud。
solution:Upgrade broadcom symantec_data_center_security_server to a higher version than -; Upgrade symantec advanced_threat_protection to a higher version than -; Upgrade symantec csapi to a higher version than 10.0.4,and avoid the version (,10.0.4]; Upgrade symantec email_security.cloud to a higher version than -; Upgrade symantec endpoint_protection to a higher version than 12.1.4,12.1.6,and avoid the version (,12.1.4],(,12.1.6]; Upgrade symantec endpoint_protection_cloud to a higher version than -; Upgrade symantec endpoint_protection_for_small_business to a higher version than 12.1,-,and avoid the version (,12.1]; Upgrade symantec mail_security_for_domino to a higher version than 8.0.9,8.1.2,8.1.3,and avoid the version (,8.0.9],8.1.2,8.1.3; Upgrade symantec mail_security_for_microsoft_exchange to a higher version than 6.5.8,7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.5,7.5.1,7.5.2,7.5.3,7.5.4,and avoid the version (,6.5.8],7.0,7.0.1,7.0.2,7.0.3,7.0.4,7.5,7.5.1,7.5.2,7.5.3,7.5.4; Upgrade symantec messaging_gateway to a higher version than 10.6.1,and avoid the version (,10.6.1]; Upgrade symantec messaging_gateway_for_service_providers to a higher version than 10.5,10.6,and avoid the version 10.5,10.6; Upgrade symantec protection_engine to a higher version than 7.0.5,7.5.0,7.5.1,7.5.2,7.5.3,7.5.4,7.5.5,7.8.0,and avoid the version (,7.0.5],7.5.0,7.5.1,7.5.2,7.5.3,7.5.4,7.5.5,7.8.0; Upgrade symantec protection_for_sharepoint_servers to a higher version than 6.0.3,6.0.4,6.0.5,6.0.6,6.0.7,and avoid the version 6.0.3,6.0.4,6.0.5,6.0.6,6.0.7; Upgrade symantec web_gateway to a higher version than -; Upgrade symantec web_security.cloud to a higher version than -