CVE-2013-3900 - Wintrust signature validation

Products

• Data Loss Prevention

Issue/Introduction

Can you confirm that Symantec DLP 16.0 MP1 executables conform to Microsoft WinVerify Trust Signature as per the Microsoft CVE details:

CVE-2013-3900 - Security Update Guide - Microsoft - WinVerifyTrust Signature Validation Vulnerability

I am looking at remediating vulnerabilities on our DLP infrastructure and just want to make sure this PE file signature vulnerability resolution will not stop us from installing any Symantec DLP packages.

Environment

Release : 16.0

Resolution

We have done checks and validated that DLP 16.0 does conform to the CVE-2013-3900 - Wintrust signature validation.