CVE-2015-6556

low

Published 2015-12-18 · Modified 2026-05-06

CVSS v3

—

CVSS v2

2.3

VIR risk

2.3

Description

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump.

Predictions

Exploit likelihood

20%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secure@symantec.com — http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00

Application impact

Vendor	Product	Versions	Fixed
symantec	endpoint_encryption	`{"endIncluding":"11.0"}`

References

http://www.securityfocus.com/bid/78803
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00
http://www.securityfocus.com/bid/78803
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20151214_00

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.