CVE-2006-2630

Symantec Client Security - Buffer Overflow

Title source: rule

Description

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Metasploit · rubyremotewindows

https://www.exploit-db.com/exploits/16830

View Code ZIP pw:eip

metasploit WORKING POC GOOD

by MC · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/antivirus/symantec_rtvscan.rb

View Code ZIP pw:eip

References (11)

[Mailing List] http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html

[Patch, Vendor Advisory] http://secunia.com/advisories/20318

[Patch, Vendor Advisory] http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html

[Patch] http://securitytracker.com/id?1016161

[Patch] http://securitytracker.com/id?1016162

[Patch, US Government Resource] http://www.kb.cert.org/vuls/id/404910

[Patch] http://www.securityfocus.com/bid/18107

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/26706

[Various Sources] http://www.eeye.com/html/research/upcoming/20060524.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/435200/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/2005

Scores

EPSS 0.7893

EPSS Percentile 99.1%

Details

Status published

Products (12)

symantec/client_security 3.0

symantec/client_security 3.0.2.2010

symantec/client_security 3.0.2.2020

symantec/client_security 3.1

symantec/client_security 3.1.394

symantec/client_security 3.1.400

symantec/norton_antivirus 10.0

symantec/norton_antivirus 10.0.2.2010

symantec/norton_antivirus 10.0.2.2020

symantec/norton_antivirus 10.0.2.2021

... and 2 more

Published May 27, 2006

Tracked Since Feb 18, 2026