CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:N/I:N/A:C
AI Score
Confidence
High
EPSS
Percentile
0.4%
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Vendor | Product | Version | CPE |
---|---|---|---|
symantec | client_security | 1.0 | cpe:2.3:a:symantec:client_security:1.0:*:*:*:*:*:*:* |
symantec | client_security | 1.0.0_b8.01.9378 | cpe:2.3:a:symantec:client_security:1.0.0_b8.01.9378:*:*:*:*:*:*:* |
symantec | client_security | 1.0.1 | cpe:2.3:a:symantec:client_security:1.0.1:*:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.425a | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.425a:mr1:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.429c | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.429c:mr2:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.434 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.434:mr3:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.437 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.437:*:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.446 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.446:mr4:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.457 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.457:mr5:*:*:*:*:*:* |
symantec | client_security | 1.0.1_build_8.01.460 | cpe:2.3:a:symantec:client_security:1.0.1_build_8.01.460:mr6:*:*:*:*:*:* |
secunia.com/advisories/21938
securityreason.com/securityalert/1591
securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html
securitytracker.com/id?1016889
securitytracker.com/id?1016892
securitytracker.com/id?1016893
securitytracker.com/id?1016894
securitytracker.com/id?1016895
securitytracker.com/id?1016896
securitytracker.com/id?1016897
securitytracker.com/id?1016898
www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php
www.securityfocus.com/archive/1/446111/100/0/threaded
www.securityfocus.com/bid/20051
www.vupen.com/english/advisories/2006/3636
exchange.xforce.ibmcloud.com/vulnerabilities/28960