20070315 Norton Insufficient validation of 'SymTDI' drivermailing list
http://marc.info/?l=full-disclosure&m=117396596027148&w=2 CVE-2007-1476
Symantec 'SYMTDI.SYS' Device Driver - Local Denial of Service
Record summary
CVE-2007-1476 has a selected CVSS score of 1.9; EIP currently links 1 catalogued exploit.
Description
The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSymantec 'SYMTDI.SYS' Device Driver - Local Denial of ServiceExploitDB exploitby David MatousekNot analyzed1 file
References
1035088vdb entry
http://osvdb.org/35088 2438Third-party advisory
http://securityreason.com/securityalert/2438 1018656vdb entry
http://securitytracker.com/id?1018656 matousec.com
http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymTDI-driver-input-buffer.php 20070315 Norton Insufficient validation of 'SymTDI' driver input buffermailing list
http://www.securityfocus.com/archive/1/462926/100/0/threaded 22977vdb entry
http://www.securityfocus.com/bid/22977 symantec.comConfirmation
http://www.symantec.com/avcenter/security/Content/2007.09.05.html symantec-firewall-symtdi-dos(33003)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33003 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1476