4.9

CVE-2006-4855

Exploit

EPSS 1.32%
Veröffentlicht 19.09.2006 18:07:00
Zuletzt bearbeitet 16.06.2026 22:29:54
Erkennungen
Login

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 19

NVD 101 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Symantec ≫ Client Security Version 1.0

Symantec ≫ Client Security Version 1.0.0_b8.01.9378

Symantec ≫ Client Security Version 1.0.1

Symantec ≫ Client Security Version 1.0.1_build_8.01.425a Update mr1

Symantec ≫ Client Security Version 1.0.1_build_8.01.429c Update mr2

Symantec ≫ Client Security Version 1.0.1_build_8.01.434 Update mr3

Symantec ≫ Client Security Version 1.0.1_build_8.01.437

Symantec ≫ Client Security Version 1.0.1_build_8.01.446 Update mr4

Symantec ≫ Client Security Version 1.0.1_build_8.01.457 Update mr5

Symantec ≫ Client Security Version 1.0.1_build_8.01.460 Update mr6

Symantec ≫ Client Security Version 1.0.1_build_8.01.464 Update mr7

Symantec ≫ Client Security Version 1.0.1_build_8.01.471 Update mr8

Symantec ≫ Client Security Version 1.0.1_build_8.01.501 Update mr9

Symantec ≫ Client Security Version 1.0_build_8.01.9374

Symantec ≫ Client Security Version 1.1

Symantec ≫ Client Security Version 1.1.1

Symantec ≫ Client Security Version 1.1.1_build_393

Symantec ≫ Client Security Version 1.1.1_mr1_build_8.1.1.314a

Symantec ≫ Client Security Version 1.1.1_mr2_build_8.1.1.319

Symantec ≫ Client Security Version 1.1.1_mr3_build_8.1.1.323

Symantec ≫ Client Security Version 1.1.1_mr4_build_8.1.1.329

Symantec ≫ Client Security Version 1.1.1_mr5_build_8.1.1.336

Symantec ≫ Client Security Version 1.1.1_mr6_b8.1.1.266

Symantec ≫ Client Security Version 1.1_stm_b8.1.0.825a

Symantec ≫ Client Security Version 2.0

Symantec ≫ Client Security Version 2.0.1_build_9.0.1.1000 Update mr1

Symantec ≫ Client Security Version 2.0.2_build_9.0.2.1000 Update mr2

Symantec ≫ Client Security Version 2.0.3_build_9.0.3.1000 Update mr3

Symantec ≫ Client Security Version 2.0.5_build_1100

Symantec ≫ Client Security Version 2.0_scf_7.1

Symantec ≫ Client Security Version 2.0_stm_build_9.0.0.338

Symantec ≫ Client Security Version 3.0

Symantec ≫ Client Security Version 3.1

Symantec ≫ Host Ids

Symantec ≫ Norton Antivirus Version 2.1 Edition ms_exchange

Symantec ≫ Norton Antivirus Version 8.0 Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1 Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1.425a Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1.425c Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1.501 Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1.9374 Edition corporate

Symantec ≫ Norton Antivirus Version 8.0.1.9378 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.0.825a Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1.319 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1.323 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1.329 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1.366 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1.377 Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1_build8.1.1.314a Edition corporate

Symantec ≫ Norton Antivirus Version 8.1.1_build393 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.434 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.437 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.446 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.457 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.460 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.464 Edition corporate

Symantec ≫ Norton Antivirus Version 8.01.471 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.0.338 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.1.1.1000 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.2.1000 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.3.1000 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.4 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.5 Edition corporate

Symantec ≫ Norton Antivirus Version 9.0.5.1100 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2000 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2001 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2002 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2010 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2011 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2020 Edition corporate

Symantec ≫ Norton Antivirus Version 10.0.2.2021 Edition corporate

Symantec ≫ Norton Antivirus Version 10.1 Edition corporate

Symantec ≫ Norton Antivirus Version 2003

Symantec ≫ Norton Antivirus Version 2003 Edition professional

Symantec ≫ Norton Antivirus Version 2004 Edition professional

Symantec ≫ Norton Antivirus Version 2005

Symantec ≫ Norton Antivirus Version 2006

Symantec ≫ Norton Antivirus Version 2007

Symantec ≫ Norton Internet Security Version 2003

Symantec ≫ Norton Internet Security Version 2003 Edition professional

Symantec ≫ Norton Internet Security Version 2004

Symantec ≫ Norton Internet Security Version 2004 Edition professional

Symantec ≫ Norton Internet Security Version 2005

Symantec ≫ Norton Internet Security Version 2005 Edition professional

Symantec ≫ Norton Internet Security Version 2006 Edition professional

Symantec ≫ Norton Internet Security Version 2007

Symantec ≫ Norton Personal Firewall Version 2003

Symantec ≫ Norton Personal Firewall Version 2004

Symantec ≫ Norton Personal Firewall Version 2005

Symantec ≫ Norton Personal Firewall Version 2006

Symantec ≫ Norton System Works Version 2003_professional_edition

Symantec ≫ Norton System Works Version 2004

Symantec ≫ Norton System Works Version 2004_professional_edition

Symantec ≫ Norton System Works Version 2005

Symantec ≫ Norton System Works Version 2005_premier

Symantec ≫ Norton System Works Version 2006

Symantec ≫ Pcanywhere Version 11.5

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.32%	0.685

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://secunia.com/advisories/21938

Vendor Advisory

http://securityreason.com/securityalert/1591

http://securityresponse.symantec.com/avcenter/security/Content/2006.09.20a.html

http://securitytracker.com/id?1016889

http://securitytracker.com/id?1016892

http://securitytracker.com/id?1016893

http://securitytracker.com/id?1016894

http://securitytracker.com/id?1016895

http://securitytracker.com/id?1016896

http://securitytracker.com/id?1016897

http://securitytracker.com/id?1016898

http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php

Vendor Advisory

http://www.securityfocus.com/archive/1/446111/100/0/threaded

http://www.securityfocus.com/bid/20051

Exploit

http://www.vupen.com/english/advisories/2006/3636

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/28960

https://nvd.nist.gov/vuln/detail/CVE-2006-4855

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-4855

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-4855

EUVD