CVE:CVE-2016-2207
CNNVD:CNNVD-201606-626
Symantec Advanced Threat Protection（ATP）、Symantec Embedded Security:Critical System Protection（SES:CSP）和Symantec Data Center Security: Server Advanced（SDCS:SA）都是美国赛门铁克（Symantec）公司的安全产品。ATP是一套用于挖掘并清除终端、网络和电子邮件网关等存在的高级威胁的软件；SES:CSP是一款轻量级的入侵检测和防御系统客户端产品；SDCS:SA为软件定义数据中心的物理和虚拟服务器提供了安全防护。 
多款Symantec和Norton产品的AntiVirus Decomposer引擎的RAR解压缩过程中存在内存损坏漏洞。远程攻击者可借助特制的RAR文件利用该漏洞造成拒绝服务（内存访问冲突），或执行任意代码。以下产品及版本受到影响：Symantec ATP，SDCS:SA 6.6 MP1版本和6.5 MP1版本，Critical System Protection (SCSP) 5.2.9 MP6版本，SES:CSP 1.0 MP5版本和6.5.0 MP1版本，Symantec Web Security .Cloud，Email Security Server .Cloud (ESS)，Symantec Web Gateway，Symantec Endpoint Protection (SEP) 12.1.6 MP4及之前版本，Symantec Endpoint Protection for Mac (SEP for Mac) 12.1.6 MP4及之前版本，Symantec Endpoint Protection for Linux (SEP for Linux) 12.1.6 MP4及之前版本，Symantec Protection Engine (SPE) 7.0.5及之前版本，7.0.4及之前版本，7.8.0版本，Symantec Protection for SharePoint Servers (SPSS) 6.03版本至6.05版本，6.0.6及之前版本，Symantec Mail Security for Microsoft Exchange (SMSMSE) 7.0.4及之前版本，7.5.4及之前版本，Symantec Mail Security for Domino (SMSDOM) 8.0.9及之前版本，8.1.3及之前版本，CSAPI 10.0.4及之前版本，Symantec Message Gateway (SMG) SMG 10.6.1-3及之前版本，Symantec Message Gateway for Service Providers (SMG-SP) 10.6版本和10.5版本，Norton Product Family、AntiVirus、Security、Security with Backup、Internet Security、360 NGC 22.7之前版本，Security for Mac 13.0.2之前版本，Power Eraser (NPE) 5.1之前版本，Bootable Removal Tool (NBRT) 2016.1之前版本。
solution:Upgrade symantec mail_security_for_microsoft_exchange to a higher version than 7.0.4,7.5.4,6.5.8,and avoid the version [7.0,7.0.4],[7.5,7.5.4],6.5.8; Upgrade symantec norton_power_eraser to a higher version than 5.0,and avoid the version (,5.0]; Upgrade symantec protection_engine to a higher version than 7.0.5,7.5.4,7.8.0,and avoid the version [7.0.0,7.0.5],[7.5.0,7.5.4],7.8.0; Upgrade symantec endpoint_protection to a higher version than 12.1.6:mp1,12.1.6:mp1a,12.1.6:mp2,12.1.6:mp3,12.1.6:mp4,and avoid the version 12.1.6:mp1,12.1.6:mp1a,12.1.6:mp2,12.1.6:mp3,12.1.6:mp4; Upgrade symantec message_gateway to a higher version than 10.6.1-3,and avoid the version (,10.6.1-3]; Upgrade symantec norton_360 to a higher version than *; Upgrade symantec norton_antivirus to a higher version than *; Upgrade symantec norton_internet_security to a higher version than *; Upgrade symantec norton_security to a higher version than *,13.0.1,and avoid the version (,13.0.1]; Upgrade symantec norton_security_with_backup to a higher version than *; Upgrade symantec ngc to a higher version than 22.6,and avoid the version (,22.6]; Upgrade symantec message_gateway_for_service_providers to a higher version than 10.5,10.6,and avoid the version 10.5,10.6; Upgrade symantec norton_bootable_removal_tool to a higher version than 2016.0,and avoid the version (,2016.0]; Upgrade symantec mail_security_for_domino to a higher version than 8.0.9,8.1.3,and avoid the version [8.0,8.0.9],[8.1,8.1.3]; Upgrade symantec data_center_security_server to a higher version than 6.0,6.0:mp1,6.5,6.5:mp1,6.6,6.6:mp1,and avoid the version 6.0,6.0:mp1,6.5,6.5:mp1,6.6,6.6:mp1; Upgrade symantec advanced_threat_protection to a higher version than 2.0.3,and avoid the version (,2.0.3]; Upgrade symantec protection_for_sharepoint_servers to a higher version than 6.03,6.04,6.05,6.06,and avoid the version 6.03,6.04,6.05,6.06; Upgrade symantec csapi to a higher version than 10.0.4,and avoid the version (,10.0.4]