21938Third-party advisory
http://secunia.com/advisories/21938 CVE-2006-4855
Symantec (Multiple Products) - 'SymEvent' Driver Local Denial of Service
Record summary
CVE-2006-4855 has a selected CVSS score of 4.9; EIP currently links 1 catalogued exploit.
Description
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSymantec (Multiple Products) - 'SymEvent' Driver Local Denial of ServiceExploitDB exploitby David MatousekNot analyzed1 file
References
Showing 12 of 171591Third-party advisory
http://securityreason.com/securityalert/1591 securityresponse.symantec.comConfirmation
http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html 1016889vdb entry
http://securitytracker.com/id?1016889 1016892vdb entry
http://securitytracker.com/id?1016892 1016893vdb entry
http://securitytracker.com/id?1016893 1016894vdb entry
http://securitytracker.com/id?1016894 1016895vdb entry
http://securitytracker.com/id?1016895 1016896vdb entry
http://securitytracker.com/id?1016896 1016897vdb entry
http://securitytracker.com/id?1016897 1016898vdb entry
http://securitytracker.com/id?1016898 matousec.com
http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php