CVE-2016-6586

Name of the Vulnerable Software and Affected Versions: Symantec Norton Mobile Security for Android versions prior to 3.16

Description: A security bypass issue exists, potentially allowing a malicious user to conduct a man-in-the-middle attack via specially crafted JavaScript. This could enable the addition of arbitrary URLs to the URL whitelist.

Recommendations: For versions prior to 3.16, update to version 3.16 or later to resolve the issue.