CVE-2006-4855
Symantec Client Security - Denial of Service via Invalid Data to \Device\SymEvent Driver
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-4855. PoCs published by David Matousek.
AI-analyzed exploit summary The provided text describes a local denial-of-service vulnerability in multiple Symantec products due to malformed data sent to the 'SymEvent' driver. It references a security advisory and a link to a binary exploit but does not contain actual exploit code.
Description
The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.
Exploits (1)
The provided text describes a local denial-of-service vulnerability in multiple Symantec products due to malformed data sent to the 'SymEvent' driver. It references a security advisory and a link to a binary exploit but does not contain actual exploit code.