Unscored severity · published Oct 23, 2006
CVE-2006-3455
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Symantec
1.1; 1.1.1; 1.1.1_build_393; 1.1.1_mr1_build_8.1.1.314a; 1.1.1_mr2_build_8.1.1.319; 1.1.1_mr3_build_8.1.1.323; +13 more · source: NVD
NA
Norton Antivirus · Symantec
8.1; 8.1.0.825a; 8.1.1; 8.1.1.319; 8.1.1.323; 8.1.1.329; +16 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3455
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3455
secunia.com
http://secunia.com/advisories/22536
securitytracker.com
http://securitytracker.com/id?1017108
securitytracker.com
http://securitytracker.com/id?1017109
www.securityfocus.com
http://www.securityfocus.com/archive/1/449524/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20684
Patch
http://www.symantec.com/avcenter/security/Content/2006.10.23.html
More from Client Security
–
CVE-2010-0107
Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and…
–
CVE-2010-0108
Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and…
–
CVE-2010-0106
The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled,…
–
CVE-2009-3104
Unspecified vulnerability in Symantec Norton AntiVirus 2005 through 2008; Norton Internet Security 2005 through 2008; AntiVirus Corporate Edition 9.0 before MR7, 10.0, 10.1 before…
–
CVE-2009-1432
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and…