1.9

CVE-2007-1476

The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security 2005 and 2006, AntiVirus Corporate Edition 3.0.x through 10.1.x, and other Norton products, allows local users to cause a denial of service (system crash) by sending crafted data to the driver's \Device file, which triggers invalid memory access, a different vulnerability than CVE-2006-4855.

Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Client Security Version2.0
Symantec ≫ Client Security Version2.0 Editionscf_7.1
Symantec ≫ Client Security Version2.0 Updatebuild_9.0.0.338
Symantec ≫ Client Security Version2.0 Updatebuild_9.0.0.338 Editionstm
Symantec ≫ Client Security Version2.0.1
Symantec ≫ Client Security Version2.0.1_build_9.0.1.1000 Updatemr1
Symantec ≫ Client Security Version2.0.2
Symantec ≫ Client Security Version2.0.2_build_9.0.2.1000 Updatemr2
Symantec ≫ Client Security Version2.0.3
Symantec ≫ Client Security Version2.0.3_build_9.0.3.1000 Updatemr3
Symantec ≫ Client Security Version2.0.4
Symantec ≫ Client Security Version2.0.4 Updatemr4_build1000
Symantec ≫ Client Security Version2.0.5
Symantec ≫ Client Security Version2.0.5_build_1100
Symantec ≫ Client Security Version2.0.5_build_1100_mp1 Updatemr5
Symantec ≫ Client Security Version2.0.6
Symantec ≫ Client Security Version2.0.6 Updatemr6
Symantec ≫ Client Security Version2.0_scf_7.1
Symantec ≫ Client Security Version2.0_stm_build_9.0.0.338
Symantec ≫ Client Security Version2.1
Symantec ≫ Client Security Version3.0
Symantec ≫ Client Security Version3.0.0.359
Symantec ≫ Client Security Version3.0.1.1000
Symantec ≫ Client Security Version3.0.1.1001
Symantec ≫ Client Security Version3.0.1.1007
Symantec ≫ Client Security Version3.0.1.1008
Symantec ≫ Client Security Version3.0.1.1009
Symantec ≫ Client Security Version3.0.2
Symantec ≫ Client Security Version3.0.2.2000
Symantec ≫ Client Security Version3.0.2.2001
Symantec ≫ Client Security Version3.0.2.2002
Symantec ≫ Client Security Version3.0.2.2010
Symantec ≫ Client Security Version3.0.2.2011
Symantec ≫ Client Security Version3.0.2.2020
Symantec ≫ Client Security Version3.0.2.2021
Symantec ≫ Client Security Version3.1
Symantec ≫ Client Security Version3.1.0.396
Symantec ≫ Client Security Version3.1.0.401
Symantec ≫ Client Security Version3.1.394
Symantec ≫ Client Security Version3.1.396
Symantec ≫ Client Security Version3.1.400
Symantec ≫ Client Security Version3.1.401
Symantec ≫ Norton Antispam Version2005
Symantec ≫ Norton Antivirus Version3.0 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.0.338 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.1 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.1.1.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.1.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.2 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.2.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.3.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.4 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.5 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.5.1100 Editioncorporate
Symantec ≫ Norton Antivirus Version9.0.6.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.1.1000 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.1.1007 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.1.1008 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2000 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2001 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2002 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2010 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2011 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2020 Editioncorporate
Symantec ≫ Norton Antivirus Version10.0.2.2021 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.4 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.4.4010 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.394 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.396 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.400 Editioncorporate
Symantec ≫ Norton Antivirus Version10.1.401 Editioncorporate
Symantec ≫ Norton Antivirus Version2005
Symantec ≫ Norton Antivirus Version2006
Symantec ≫ Norton Personal Firewall Version <= 2006_9.1.1.7
Symantec ≫ Norton Personal Firewall Version2006_9.1.0.33
Symantec ≫ Norton System Works Version2005
Symantec ≫ Norton System Works Version2006
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.505
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.